Merge pull request #287615 from fabferri/patch-3

Update vpn-gateway-faq-p2s-all-include.md

Author: prmerger-automator[bot]

includes/vpn-gateway-faq-p2s-all-include.md

@@ -120,6 +120,16 @@ Azure supports Windows, Mac, and Linux for P2S VPN.
 
 Yes. If the gateway SKU that you're using supports RADIUS or IKEv2, you can enable these features on gateways that you already deployed by using Azure PowerShell or the Azure portal. The Basic SKU doesn't support RADIUS or IKEv2.
 
+###  <a name="vpn-disconnect"></a>Why am I getting disconnected from my Azure VPN client? What can I do to reduce the frequency of disconnection?
+
+You may see one of the following messages: 
+- In Azure VPN client for Windows **ver. 3.4.0.0**: "Your authentication with Microsoft Entra is expired. You need to re-authenticate in Entra to acquire a new token. Authentication timeout can be tuned by your administrator." 
+- In Azure VPN client for macOS **ver. 2.7.101**: "Your authentication with Microsoft Entra has expired so you need to re-authenticate to acquire a new token. Please try connecting again. Authentication policies and timeout are configured by your administrator in Entra tenant." 
+
+The point-to-site connection disconnects because the current refresh token in the Azure VPN client, acquired from Entra ID, has expired or become invalid. This token is renewed approximately every hour. Entra tenant administrators can extend the sign-in frequency by adding conditional access policies. Please work with your Entra tenant administrators to extend the refresh token expiration interval. 
+
+For more information, see: [VPN client error: Your authentication with Microsoft Entra expired](../articles/vpn-gateway/vpn-gateway-troubleshoot-vpn-point-to-site-connection-problems.md#entra-expired).
+
 ### <a name="removeconfig"></a>How do I remove the configuration of a P2S connection?
 
 You can remove a P2S configuration by using the following Azure PowerShell or Azure CLI commands: