> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/support-1/troubleshooting-guides/desktop-client/mfa-location-disconnected-after-x-time.md).

# MFA location disconnected after X-time

location, After enabling Multi-Factor Authentication for a location, the configuration of the gateway changes. Without MFA, peers (devices) are persistent (always in the Kernel memory) and gateway only changed the gateway configuration if a peer is added/removed/changed.

But when MFA is enabled, peers **are only added to the gateway** after successful MFA on the client (and pre-shared key exchange with client and gateway to establish a dedicated key for the session).

Also, there is a setting in the location named *Peer Disconnect Threshold (seconds):*

<figure><img src="/files/DD8eyMINcZLXmj7AZXM2" alt=""><figcaption></figcaption></figure>

This setting specifies that if the **peer is inactive for (defined seconds)**\_, the gateway **should remove it from the configuration** (as it should not be persistent since MFA is required).

So if you are disconnected from the location:

1. Check what is your setting for peer disconnect.
2. Make sure you are on the latest version of the client.