Cisco ISE - modify Authorization Attributes for a network device

[Sudqi]

Hello Experts,

How can I modify the Authorization Attributes in ISE, so that when a network device has a ssh session, the time out will be (never)?

Thanks

[balaji.bandi]

Leaving always on is security risk:

You can do this on the device :

(config)#line vty 0 15
(config-line)#session-timeout ?

you can also use exec-timeout x x

[Sudqi]

Hi Balaji,

yes, for sure, but in my case, the ISE overrides the configuration, 

[balaji.bandi]

Try below:  if you using ISE 3.0

[Sudqi · Accepted solution]

Solved:

Just modify the time in Shell Profile (work center - device administration - policy element - result - TACACS profile)

then edit the needed profile,

Best Regards