This issue affects profiles with a VPN payload that uses the Palo Alto Networks GlobalProtect connection type. The Disconnect on idle (min) field is actually measured in seconds, rather than minutes. For example, a value of 60 would disconnect a user after being idle for 60 seconds.
Enter the appropriate value in seconds instead of minutes.
This has been resolved in AirWatch 9.1.