SSL VPN clients disconnecting right at 8 hours.

Question

Have a strange issue where anyone connected via the SSL VPN (Sophos Connect) will disconnect right at 8 hours. I've already checked the settings under Authentication > Services and they are set past 8 hours. Under Maximum Session time-out it is at "Unlimited". Under AD SSO settings it is set for 10 hours. The firewall is on v19MR1 and the Sophos Connect clients are on the latest as well. One thing I haven't tested is a non-AD user to see if they disconnect as well. 
 The end-user also doesn't realize they were disconnected because the client still shows it active. They have to manual disconnect. 
 
 Here's an example:

Sam Mroe · Accepted Answer

Is your IP/Network set correctly in the global SSL VPN settings? If this device was on a previous firmware (v18 or earlier) it converted the config and you need to change the IP/Subnet. 
 
 SSL VPN "IPv4 lease range" changes in SFOS v19. - Recommended Reads - Sophos Firewall - Sophos Community 
 
 Change .5 to .0 and leave it as a /24 if you are just using the default setup. Make sure you firewall rules account for this change.

Sam Mroe · Answer

Remote Access VPN > SSL VPN > SSL VPN Global Settings 
 
 Increase Key lifetime from 8 hours to something like 12 hours. Don't use 24 as they will run into the same issue just the next day.

SSL VPN clients disconnecting right at 8 hours.

Top Replies