- Products
- Network Security
- Threat Protection
- Secure Access Service Edge (SASE)
- Cloud Security
- Endpoint Security
- Email Security
- Secure Access
-
Wi-Fi 6 Access Points
SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.
Read More
- Solutions
- Industries
- Use Cases
- Solutions Widgets
- Solutions Content Widgets
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
- Solutions Image Widgets
-
- Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
- Custom HTML : Partners Content WIdgets
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
- Partners Image Widgets
-
- Support
- Support
- Resources
- Capture Labs
- Support Widget
- Custom HTML : Support Content WIdgets
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
- Support Image Widgets
-
- COMPANY
- PROMOTIONS
- MANAGED SERVICES
- Contact Sales
-
- Menu
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Inactivity timeout for NetExtender
03/26/2020 
181 People found this article helpful
197,407 Views
Description
NetExtender client connections should be terminated if a user session is idle for certain amount of time.
Cause
If a session has been idle for certain time, it should be terminated to be more complaint with PCI DSS Scans.
Resolution
Inactivity timeout for NetExtender Windows Client connections is introduced in SMA firmware 9.0.0.0. If you are running on older firmware version, check upgrade guide and upgrade SMA appliance to firmware 9.0.0.0 or above.
Steps to configure Inactivity timeout for NetExtender:
1. Inactivity timeout can be configured based on Global, Group or User. By default, global inactivity timeout is set to 15 minutes. This can be overridden in Group / User settings.
Global Inactivity Timeout:
Navigate to Users - Local Groups - Edit Global Policies, under General tab, set Inactivity Timeout and click Accept. Setting the global inactivity timeout to 0 disables the Inactivity timeout for users that do not have a group / user timeout configured.
Group Inactivity Timeout:
Navigate to Users - Local Groups - Edit the required group, under General tab, set Inactivity Timeout and click Accept. Set to 0 to use the global timeout.
User Inactivity timeout:
Navigate to Users - Local Users- Edit the required user, under General tab, set Inactivity Timeout and click Accept.
The Inactivity timeout is applicable for Portal logins, HTML5 RDP/SSH/VNC/Telnet bookmarks, NetExtender connections.
2. To apply the inactivity timeout for NetExtender sessions, navigate to Clients - Settings, under Client Settings, set 'Disconnection on inactivity timeout' to Enabled. Click Accept.
Result:
Connect VPN to the SMA appliance using NetExtender . The inactivity timeout is monitored based on the user keyboard / mouse activity. If there is no keyboard / mouse activity, you will see Idle Time increasing for the user in appliance - Users - Status.
Once inactivity time reaches, connection will be terminated.
Note:
1.Inactivity timeout will not work when 'Always On VPN' feature is enabled for NetExtender Connections.
2.Inactivity timeout applies to NetExtender Windows Clients only.
3.User timeout setting takes precedence over the group timeout and the group timeout takes precedence over the global timeout.
Related Articles
- Printer Redirection with RDP through Secure Mobile Access
- EPC check based on Windows version
- SMA1000: How to manage Connect Tunnel client Auto-updates
YES
NO