What is session roaming?
Session roaming is a user role-based VPN tunneling option that when enabled, allows the Pulse Connect Secure gateway to accept a session cookie from an IP address other than the IP address that the user initially signed into the Pulse Connect Secure gateway from. By default, session roaming is disabled and the Pulse Connect Secure gateway will not accept a session cookie from any IP address other than the one the user signed in from. If the user’s IP address changes during their session, the Pulse Connect Secure gateway will terminate the user’s session, forcing them to sign-in again.
When session roaming is enabled, a user can initiate their secure session from one IP address and if their IP address changes during the session, the Pulse Connect Secure gateway will accept the session cookie and the user will remain signed in.
Note: Please ensure that you are on PCS version 9.1R2 or later when enabling this option as it contains security hardening around CSRF. |