Operational Defect Database
BugZero found this defect 339 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
WatchGuard Technologies | kA16S000000gDGiSAM
Idle timeout does not work for Mobile VPN with IPSec users on FireCluster
Last update date:
6/15/2023
Affected products:
Firebox M200
Firebox M300
Firebox M270
Firebox M370
Firebox M470
Firebox M570
Firebox M670
Firebox M290
Firebox M390
Firebox M400
Firebox M500
Firebox M440
Affected releases:
All
Fireware
11.x
11.1.x
11.10.x
11.10
11.10.1
11.10.2
11.10.3
11.10.4
11.10.5
11.10.6
Fixed releases:
v12.10
Description:
Issue
When Mobile VPN with IPSec Phase 1 settings use Dead Peer Detection, idle timeout does not log off users that did not disconnect gracefully.This issue affects only FireCluster configurations.
Workaround/Solution
In the Phase 1 settings, switch from Dead Peer Detection to IKE Keep-alive. For more information, go to Define Advanced Phase 1 Settings in Fireware Help.
