Reset Search
 

 

Article

KB30329 - Session Roaming Overview

« Go Back

Information

 
Last Modified Date8/10/2021 3:43 PM
Synopsis
This article provides details about what session roaming does and the security aspects around this feature.
Problem or Goal

 
Cause
Solution

What is session roaming?

Session roaming is a user role-based VPN tunneling option that when enabled, allows the Pulse Connect Secure gateway to accept a session cookie from an IP address other than the IP address that the user initially signed into the Pulse Connect Secure gateway from.
By default, session roaming is disabled and the Pulse Connect Secure gateway will not accept a session cookie from any IP address other than the one the user signed in from. If the user’s IP address changes during their session, the Pulse Connect Secure gateway will terminate the user’s session, forcing them to sign-in again.

When session roaming is enabled, a user can initiate their secure session from one IP address and if their IP address changes during the session, the Pulse Connect Secure gateway will accept the session cookie and the user will remain signed in.

Note: Please ensure that you are on PCS version 9.1R2 or later when enabling this option as it contains security hardening around CSRF.
Related Links
Attachment 1 
Created ByData Deployment

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255