sonicwall netextender configure ssl vpn connection

The reason I asked the question to begin with is because my boss asked me to have users booted off the VPN after 15 minutes of inactivity, so we can see how often they are getting disconnected/logging back in so he can determine if people are actually working from home.

Okay, so now that I know what SonicWall means by 'Inactive' (IE: broken link), meaning my immediate supervisor (.the CFO.) wants me to do the impossible once again. I wonder if it's more 'broken link' detection than actual 'idle time'What happens if you turn off the wi-fi on your machine at home?įuricle - That was it! I just killed the wifi, and about a minute later the 'Inactivity Time' was showing 1 minute. There has to be a way to go about this though.I mean, why else would they have the 'Inactivity Timeout' option? I find it hard to believe there would ever be a way to detect the idle time for a VPN Client, as there is always something happening behind the scenes of any networked device. I reconnected to the SSLVPN and after 5 minutes the 'Inactivity Time' still shows 0 minutes and the packets sent/received is continually incrementing, meaning there is data being sent behind the scenes that is preventing an idle time from accumulating. For lack of anything else to try, I did disable NAT Traversal to see what happens.unfortunately, the results are the same. I think you are on the right track about a keepalive packet being sent over the VPN, but I thought that the NAT Traversal settings you mentioned are for Site-to-Site based connections. The “keepalive” is silently discarded by the IPSec peer. Therefore, to preserve a dynamic NAT binding for the life of an IPSec session, a 1-byte UDP is designated as a “NAT Traversal keepalive” and acts as a “heartbeat” sent by the VPN device behind the NAT or NAPT device.

IPSec VPNs protect traffic exchanged between authenticated endpoints, but authenticated endpoints cannot be dynamically re-mapped mid-session for NAT traversal to work. There will be some kind of 'keepalive' packet being sent between the client and the host, not sure where to look to configure it but can guarantee that's the problem!Įnable NAT Traversal : Select this setting if a NAT device is located between your VPN endpoints.

Sonicwall netextender configure ssl vpn connection