Azure Global Secure access timeout

John Champ 0 Reputation points
2024-03-21T14:53:25.5133333+00:00

We are using Azure Global Secure Access and putty session keeps timing out after 5 minutes. Is there a setting i can change in GSA to make sure it doesn't happen.

we have other VPN solutions that this doesn't timeout when connected. We made sure Putty application config is also set to never timeout.

Microsoft Entra Private Access
Microsoft Entra Private Access
Microsoft Entra Private Access provides secure and deep identity-aware, Zero Trust network access to all private apps and resources.
43 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Marilee Turscak-MSFT 34,396 Reputation points Microsoft Employee
    2024-03-22T00:51:14.92+00:00

    Hi @John Champ ,

    It sounds like you might be hitting by-design feature of the software load balancer in front of your VMs. By default it will close any idle connections after 4 minutes, but you can configure the timeout to be anything between 4 and 100 minutes:

    Configurable Idle Timeout for Azure Load Balancer

    You need to have a Standard load balancer from Azure to end the connection with a TCP RST packet, letting the app know that the connection has ended. The free load balancer that comes with the server does not have this feature.

    Let me know if this helps and if you run into any issues.

    If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar questions.


  2. Marilee Turscak-MSFT 34,396 Reputation points Microsoft Employee
    2024-03-23T00:18:42.4533333+00:00

    Hi @John Champ ,

    Response from the product team:

    Global Secure Access is still in preview, so there could be issues not yet detected. However, there does not appear to be any setting that would affect timeout. This sounds as though it may be an issue with the application and/or the network.

     

    To further diagnose I would recommend creating a support case. If you email me at AzCommunity@microsoft.com ("Attn: Marilee Turscak") and include your subscription ID and a link to this thread, I can get a one-time free support case opened to look into this.

     

    0 comments No comments

  3. John Champ 0 Reputation points
    2024-03-25T19:51:29.8266667+00:00

    Sure Thanks. Seems like a limitation for now. I will open up a case.