For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeroen_131594's avatar
Jeroen_131594
Icon for Nimbostratus rankNimbostratus
Jan 11, 2016

Locking webtop, while continuing session

Hi,   Is it possible to lock the webtop after say 30 minutes, while continuing to use the session already created to the VMware Horizon and/or Citrix Farms ? If you would need to use the webstop a...
BIG-IP Access Policy Manager (APM)
security
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Jan 11, 2016

From APM's perspective, you can simply adjust the idle timeout to > 30 mins. Unfortunately APM don't have timeout control over:

 Horizon View Client
 VMWare Server
 Citrix Presentation Server
 Citrix Receiver Client

So these things may have their own timeouts that must be adjusted for your whole use case to work. Your best bet is to perform some testing around it to see what works.

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Jan 13, 2016
There is a reauthentication timeout function but it doesn't work how you describe. If the user is idle, the session is expired and if the reauth timeout is exceeded, same thing. As a gateway device, The headroom required to store a lot of idle user data like this would be too expensive. It sounds like what you said, a basic lock screen on the workstation which is usually implemented as a group policy setting on a managed PC.