Cisco Anyconnect Idle Timeout

[danielesquaranti]

Hi,

I recently enable the "vpn-idle-timeout 3" on the group-policy for the vpn client on Cisco ASA.

I try to lock the screen of my pc but after 3 minutes the anyconnect doesn't disconnect.

Anyone know when the connection does it actually go in idle?

Is there a way to set the timeout when the pc goes to lock screen, or when the users aren't actually doing anything?

I Also see that there is the "vpn-session-timeout" command but I don't want to disconnect the users after the time expires..

Thanks in advance for the support.

[Squozen_EU]

Modern OSs are virtually never idle, that's the problem. Run Wireshark when your computer is 'idle' and you'll see it's anything but.

What problem are you actually trying to solve here? If a user has locked their computer, wouldn't you want the machine to stay connected in order for group policies updates to push and other management tools to maintain their sessions?

[balaji.bandi]

check this thread and verify is the client really idle ?

https://community.cisco.com/t5/network-security/vpn-idle-timeout-1-vpn-will-never-be-disconnected/td-p/4036713