WebVPN: Session disconnected. Reason: Idle Timeout

[Adam David]

Hi,

We have an issue here where a client (user01) says that he can connect to WebVPN but cannot get to the Citrix Application. I’ve checked on the WebVPN and found the following error message; Idle Timeout.

I’m not so familiar with WebVPN and would appreciate if you could guide me how to troubleshoot this problem. Please let me know if you need more info.

Thanks in advance

WebVPN# sh log | i user01

Jun 09 2011 08:59:35 10.10.11.11 : %ASA-4-113019: Group = DefaultWEBVPNGroup, Username = user01, IP = 10.10.10.10, Session disconnected. Session Type: SSL, Duration: 0h:30m:24s, Bytes xmt: 85373, Bytes rcv: 8430, Reason: Idle Timeout

Jun 09 2011 09:09:35 10.10.11.11 : %ASA-4-113019: Group = DefaultWEBVPNGroup, Username = user01, IP = 10.10.10.10, Session disconnected. Session Type: SSL, Duration: 0h:37m:29s, Bytes xmt: 157884, Bytes rcv: 84032, Reason: Idle Timeout

Jun 09 2011 12:06:36 10.10.11.11 : %ASA-4-113019: Group = DefaultWEBVPNGroup, Username = user01, IP = 10.10.10.10, Session disconnected. Session Type: SSL, Duration: 0h:43m:17s, Bytes xmt: 610088, Bytes rcv: 669792, Reason: Idle Timeout

WebVPN#

[Marcin Latosiewicz]

Adam,

The idle timeout (by default 30 minutes) should not have anything to do with citrix connectivity.

What it means that the user was disconnected because for last 30 minutes no data was passing.

You can TRY to set the timeout to a longer value (say an hour or 8 hours if you want).

Few of the things that I would like to understand :

1) if the problem with accessing the citrix apps is specific to this user only (maybe some sessions get stuck)

2) what version of ASA you're currently on.

3) Is this SVC session (Anyconnect) or access via portal?

Marcin