Configure session cookie timeout

A session cookie is generated when browser clients connect to the InTouch Access Anywhere Secure Gateway.

Use the following parameter to configure the session cookie timeout in the EricomSecureGateway.Config file:

<Property name="ClientSessionCookieTimeoutMinutes" type="int" value="60" />

Note: The default timeout period is sixty minutes. Do not set this value to 0. A value of 0 disables the cookie timeout interval.

If you try to connect by means of a Websocket or HTTPS (if enabled) and the cookie has expired, the connection will be rejected. You will need to reload the page to re-attempt the login.

The following details apply to the session cookie lease:

• A cookie is cached in the InTouch Access Anywhere Gateway the first time an end-user’s browser requests a page.

• The cookie lease duration is defined based on "ClientSessionCookieTimeoutMinutes" value.

• The lease is maintained on the Access Anywhere Server side, not in the browsers, so all browsers are treated as a single browser from your device.

• The cookie value and lease are per client (IP address), so multiple browsers on the same device will use the same cookie value and the same lease.

• The cookie lease duration is not extended each time a page is retrieved. A cookie lease expires only after the configured duration.

  This cookie lease duration requires reloading the page after each expiration to contact the Gateway.