Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Feb 06, 2013

APM Session timeout

Hello

 

It is possible to custumize Inactivity, Maximum Session and Access Policy Timeout, but , it's a global value.

 

We have different type of users that must connect to the same Portal. Some of them just access on time to time to check their e-mail. For other users VPN access is their usual way for working

 

In Juniper we have differente timeout values according to the LDAP group the user belongs to. Is it possible to change the session timeout depending on the user that is connecting on APM?

 

Thanks

 

 

2 Replies

  • You can do it with session.max_session_timeout,

     

    I've found the answer I've been searching for a couple of days after adding this topic.

     

  • How are you applying the setting? Through and iRule or the visual policy editor?

     

     

    With that variable you could also create an empty object in the visual policy editor, create branch rules matching desired groups (perhaps an AD group), and apply custom timeouts to each branch. This branch rule determination is probably best in a Macro so you can add it wherever without having to duplicate the ending of the branches in the main policy.