> For the complete documentation index, see [llms.txt](https://docs.parallels.com/landing/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/connection-and-authentication-settings/remote-session-settings.md).

# Remote session settings

The **Settings** tab in the **Connection** category allows you to configure the following remote session options.

### **Declare user session as idle after**

This option affects reporting statistics, whereby a session is declared idle after the amount of time specified without any activity.

### **FIPS 140-2 encryption**

The **FIPS 140-2 encryption** property allows you to specify whether FIPS-encrypted connections are allowed or even enforced on RAS Secure Gateways. When you allow (or enforce) the encryption, the Gateways will use the FIPS 140-2 encryption module. You can choose from the following options:

* **Disabled**. FIPS 140-2 encryption is disabled on RAS Secure Gateways.
* **Allowed**. RAS Secure Gateways accept both FIPS-encrypted and non-FIPS-encrypted connections.
* **Enforced**. RAS Secure Gateways accept FIPS-encrypted connections and will drop any non-FIPS-encrypted connection.

{% hint style="info" %}
**Note:** For FIPS 140-2 encryption to work, a FIPS compliant certificate must be installed on each RAS Secure Gateway.
{% endhint %}

When you enable FIPS 140-2 encryption, the encryption status is displayed on the **Information** > **Site** tab in the RAS Console. Look for the **Encryption** property of a RAS Secure Gateway.

{% hint style="info" %}
**Note:** If you use FIPS, the minimum allowed version of TLS is automatically set to 1.2.
{% endhint %}

FIPS 140-2 encryption is supported in all versions of Parallels Client except for the following:

* Parallels Client for Windows installed on Windows 8.1 and earlier
* Parallels Client for Linux downloaded from the IGEL App Portal

{% hint style="info" %}
**Note:** If you need to use FIPS in IGEL OS, you can download the tarball version of Parallels Client for Linux from the [Parallels site](https://www.parallels.com/products/ras/download/client/). Note that installing applications outside of the IGEL App Portal is not endorsed by IGEL and Parallels will not be able to provide support for this case. The tarball needs to be extracted to a persistent storage area, or it will be erased upon system reboot.&#x20;
{% endhint %}

* Parallels Client for Android
* Parallels Client for iOS
* Parallels User Portal

{% hint style="info" %}
**Note:** Parallels Client for ARM64 does not support FIPS 140-2.
{% endhint %}

Please also note that when FIPS 140-2 encryption is enforced, it is enforced all users in a given Farm. If there's a necessity to force FIPS for one user group and not forced for another, a new Farm must be deployed for this purpose.

### **Automatically log out client idle connection after**

Specifies the time period after which an idle client connection should be logged out. Once the connection is logged out, the user is disconnected from Parallels RAS and is presented with the **Connections** dialog in Parallels Client as a way to notify them that they were logged out. They can use the dialog to log back on if desired.

### **Log out idle session mode**

Specifies when the automatic logout of an idle client connection is triggered:

* With no active session, the client connection is logged out only if the user does not have any active published applications or desktop sessions running.
* With or without active session, the client connection is logged out regardless of whether the user still has active published applications or desktop sessions.

{% hint style="info" %}
**Note**: In the Parallels RAS Web Client, automatic logout behavior depends on how resources are opened:

* Applications opened in the same browser tab as the User Portal launcher do not trigger a client logout.
* Applications opened in a separate browser tab and published desktops (which always open in a separate tab) allow the User Portal launcher session to log out independently.
  {% endhint %}

### **Cached authentication token timeout**

Specify the amount of time that a session is cached for (higher amount of time reduces AD transactions).

### **Clear cached authentication tokens (a button)**

Clears all cached session information.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/connection-and-authentication-settings/remote-session-settings.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
