Always-on VPN

This article explains the process of using and managing Always-on VPN on the Users & Teams page.

Always-on VPN will allow admins to control users' ability to disconnect VPN in Timus Connect app. 'Users cannot disconnect' means users cannot disconnect. 'Users can disconnect with admin approval' means users must submit a request to disconnect, and admin must approve the request. 'Users can disconnect without admin approval' means users must submit a request to disconnect, and request is automatically approved, without the need for admin approval. One request is valid for one disconnect only.

This feature is only available on Windows and MacOS.

• To activate Always-on VPN, you need to go to the page Users & Teams -> Agent Profile -> Edit Default Profile or create a new Agent Profile by clicking on Create New button at the top right of the screen as shown in the image below
  
• Once you click on Edit the Default Profile, you will see the pop-up as shown in the image below. You will not able to change Users, Teams and Tags here. They have already been selected as all users, teams and tags due to being the Default Profile. If you want to specify these such as selecting specific users, teams or tags, you need to create a new Agent Profile.

• Once you select one of the tabs, Windows or MacOS, at the top of the pop-up screen, you will see the screen where you can enable/disable the Always-on VPN as shown in the image below.

This feature does not provide User can modify option. Therefore, if it is enabled by the admin, the users, selected by admin, will be tracered.

When you click on Disconnect on Timus Connect Application while you are connected to one of your gateways, you will see a pop-up as shown in the image below as long as Always-on VPN feature is selected as Users cannot disconnect.

Once Always-on VPN is selected as Users can disconnect with admin approval and you try to disconnect from the VPN, you will see a pop-up as shown in the image below. You will need to click on Go to My Timus page.

Once you click on Go to My Timus page, you will see the page as shown in the image below to send a request to your admin to be able to disconnect from the VPN.

Once you click on Create Request as shown in the image above, you will be able to see the pop-up screen as shown in the image below. The request will be selected as Disconnect VPN automatically, you need to write a reason why the admin should let you disconnect from the VPN.

The reason field is not required, you can leave it blank.

Once you save the pop-up screen above, you will be able to see your all requests on the main page my.timusnetworks.com located on the tab Requests if they have been approved or not.

If you have already sent a request to the admin to be able to disconnect from the VPN, you cannot send a new request until the admin responses your request.

You can cancel your request anytime that you want while the status is pending.

The selected admins by the super admin

Enabling notifications means that selected admins will get notification emails when a disconnect request is submitted, approved, denied, or cancelled. Emails will be sent for all requests, regardless of whether admin approval is required or not. Maximum 10 admins can be selected.

The status of Always-on VPN:

Pending: You have sent a request to the admin to let you disconnect from the VPN, you need to wait on your admin's response.

Approved: Your request has been approved by the admin. You are allowed to disconnect from the VPN if needed.

Denied: Your request has been denied by the admin. You are not allowed to disconnect from the VPN.

Cancelled: You have cancelled the request by yourself. It is no longer under consideration by the admin.

Once your request has been approved or denied, you will also be notified by an email as shown in the images below.

The deny reasons by the admins are as follows:

• Invalid justification.
• Insufficient justification.
• Insufficient justification, please provide more details.
• Company security policy violation.