ASA Uauth Absolute Timeout

[Alex Pfeil]

Can somebody explain what the absolute timeout is for a user authentication? Does it mean after this specific time, you have to authenticate again?

[Alex Pfeil · Accepted solution]

The official answer is that after 5 idle minutes, the user authentication is reset. I believe the idle time starts counting after they login.

Since it was only 5 minutes, I went ahead and ran a test. I caught a user that had been logged in for 12 seconds.  When the idle time hit 5:00 minutes, it gets rid of the authenticated user.  I even caught the user being removed from the show uauth with 1 Authenticated user still in the command.  After running the command shortly after, it showed 0 Authenticated users.

NotmyASAname#  show uauth
                        Current    Most Seen
Authenticated Users       1          4
Authen In Progress        0          11
user 'username' at 10.1.2.3, authenticated (idle for 0:00:12)
   absolute   timeout: 0:05:00
   inactivity timeout: 0:00:00
NotmyASAname#

user 'username' at 10.1.2.3, authenticated (idle for 0:04:59)
   absolute   timeout: 0:05:00
   inactivity timeout: 0:00:00
NotmyASAname#  show uauth
                        Current    Most Seen
Authenticated Users       1          4
Authen In Progress        0          11
NotmyASAname#  show uauth
                        Current    Most Seen
Authenticated Users       0          4
Authen In Progress        0          11
NotmyASAname#  show uauth