ASA Uauth Absolute Timeout

Alex Pfeil — Fri, 21 Feb 2020 16:49:16 GMT

Can somebody explain what the absolute timeout is for a user authentication? Does it mean after this specific time, you have to authenticate again?

Re: ASA Uauth Absolute Timeout

Alex Pfeil — Thu, 21 Feb 2019 15:43:38 GMT

The official answer is that after 5 idle minutes, the user authentication is reset. I believe the idle time starts counting after they login.

Since it was only 5 minutes, I went ahead and ran a test. I caught a user that had been logged in for 12 seconds. When the idle time hit 5:00 minutes, it gets rid of the authenticated user. I even caught the user being removed from the show uauth with 1 Authenticated user still in the command. After running the command shortly after, it showed 0 Authenticated users.

NotmyASAname# show uauth
                        Current    Most Seen
Authenticated Users       1          4
Authen In Progress        0          11
user 'username' at 10.1.2.3, authenticated (idle for 0:00:12)
   absolute   timeout: 0:05:00
   inactivity timeout: 0:00:00
NotmyASAname#

user 'username' at 10.1.2.3, authenticated (idle for 0:04:59)
   absolute   timeout: 0:05:00
   inactivity timeout: 0:00:00
NotmyASAname# show uauth
                        Current    Most Seen
Authenticated Users       1          4
Authen In Progress        0          11
NotmyASAname# show uauth
                        Current    Most Seen
Authenticated Users       0          4
Authen In Progress        0          11
NotmyASAname# show uauth

topic ASA Uauth Absolute Timeout in Network Security

ASA Uauth Absolute Timeout

Re: ASA Uauth Absolute Timeout