Enforcing PIX Conn Timeouts

[j-blackmore]

Hello,

Is it possible to enforce the connection timeouts on a vpn client with full time connections to upodate servers like MS Update, ZoneAlarm update, etc.?

Thanks!

[jsivulka]

The client connections can be timed out by configuring the appropriate commands on the headend devices using the vpngroup command. One example is the 'vpngroup idle-time' command on the PIX.