Security

We are using Clearpass 6.4.0

We are seeing high session count from our Guest users. Every time a new users joins the network it creates a new session that doesn't seem to ever time out.

We have a captive portal setup that only requires an acceptance of our AUP to proceed. We use a local user (GuestAuth) to authenticate to Guest. 

The problem we see is each user that connects, creates a new session. The number of sessions just continues to grow. 

How can we expire sessions that are >24Hours?

Do you have Interim Accouting enabled ?

I can't remember off the top of my head where interim accounting is located in the profile. Could you direct me please? I'd like to verify before I give an answer.

EDIT:

I found it. Configuration > Wireless > AP Configuration >  Wireless LAN > Virtual AP > {VAP Profile} > AAA

And yes. Interim accounting is enabled. 

Should I have User Idle timeout enabled and a time specified? Would that make a difference?

Yes it is enabled on the Controller and on CPPM. 

You add this into your policy