If using backend authentication (f.e RADIUS and OTP) ASG cache the credentials 300s.
- That means that users with OTP cannot reconnect f.e. a broken SSL-VPN-Tunnel during these 300s because of an old (preceding) password is still in the cache and the user has only a new OTP-Password available ?
- can I disable authentication cache ?
- Does the counter for these 300s starts every time from 0 when the credentials are used from the cache ? (like MAC in ARP-Table)
- can I see the content of the authentication cache ?
haifisch
