Client Authentication.. Unauthenticated Banner & Session Timeouts?

[Waylander]

All,

I have a test environment where the firewall (NGX R60 on Windows 2003) is being used for Client Authentication (through a Radius Server).

1) After authenticating through the firewall (HTTP on port 900) the users are then able to establish various connections through the firewall (rulebase dependant). I have configured the "Authorisation Timeout" to 1hr, and "Number of Sessions Allowed" to Infinite, however user authentication does not seem to be lasting the full hour, in fact far from it, more like a few minutes.

Does the authentication get removed after a completed session? or is there something else missing here?

2) I need to be able to provide a banner message to unauthenticated users indicating they need to authenticate.

How do I do this? At the moment I have setup a "Reject" rule on HTTP for testing but get no message back at all?!

Any help appreciated,

regards,