How to set cookie expiration times
Originally Published: 2000-09-25
Last Modified: 2023-10-06
Article Number
000053738
Applies To
RSA ACE/Agent for Web
RSA ACE/Agent 4.4 for Windows NT (no longer supported as of 3-3-2003)
Netscape Navigator browser does not experience this problem
Issue
How to set cookie expiration times
A SecurID user accesses a protected page and gets challenged. If that user browses to another page and then hits BACK to the protected page, they are not challenged again.
To ensure that cookie timeouts are enforced, you need to enable the option in your browser to always force pages to update. Doing so ensures that the page is refreshed and cookie time validity is checked by our code. If the pages are not  refreshed, the client code will not check the time validity on the cookies. Even if the cookie expiration time is in the past, the user will not be prompted for SecurID authentication.
Cause
This is caused by viewing a cached page which is something our agent does not check
Resolution
To enable this option for Internet Explorer, do the following:

1. From the top menu, select on Tools --> Internet Options

2. Under the Advanced tab, select "Automatically check for Internet Explorer Updates"
Don't see what you're looking for?