How to disconnect\reset vpn connections nightly?

[jbitter001]

We have some clients that connect in via a vpn connection.  I have noticed that some do not disconnect for days.  is there a way to reset all vpn connections at a specific time each day...say at 1:00AM?  We are using a ASA 5508 w/SourceFire (Firepower), vpn connection is anyconnect.

Regards,

[Rahul Govindan]

You can use EEM to do this. The following guide has an example to do exactly what you need:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118087-technote-asa-00.html#anc7

event manager applet VPN-Disconnect
 event timer absolute time 01:00:00
 action 1 cli command "vpn-sessiondb logoff anyconnect noconfirm"
 output none

[Collin Clark]

You could also configure a 'max connect time' for the Anyconnect session. Set it to 24 hours and they will automatically be logged off 24 hours after connecting.