AAA session is established once a user has been authenticated and logged in to the NetScaler Gateway. Administrators can configure AAA session timeouts via NetScaler GUI and CLI. ICA connections are the sessions on the XenApps/XenDesktops environments. NetScaler gives administrator an option to kill ICA connections the moment the user session timeouts (This time is configurable).

Instructions

Configuring AAA session timeout

A. From the NetScaler GUI:

1. Login to NetScaler GUI and follow this path: Configurations->NetScaler Gateway-> Global Settings-> Change Global Settings (Under Settings section)

2. Select the Client Experience Tab and set a value for ‘Session Time-out(mins)’ field e.g. 30 minutes in the below case, and click on OK
   

B. From the CLI:
The command to set the AAA session timeout from the CLI is as follows:

set vpn parameter sessTimeout <time in minutes>

Enabling ICA connection timeout upon AAA session timeout

A. From the NetScaler GUI

1. Login to NetScaler GUI and follow this path: Configurations->NetScaler Gateway-> Global Settings-> Change Global Settings (Under Settings section)

2. Under the Network Configuration tab, select ‘ON’ from the ‘ICA Session Timeout’ drop down and click OK.
   

B. From the CLI

The command to enable ICA session timeout with AAA session timeout from the CLI is as follows:
set vpn parameter icasessionTimeout ON

Once the ICA connection timeout has been activated, after an idle time of 30 minutes (since session timeout has been configured as 30 minutes) ICA connections shall time out accordingly.