Session-Timeout: Need a solution to keep TCP Sessions alive

[xyCruiseryx]

Hi all,

my customer is using an old application without keep alive feature. The protocol is TCP 9999 and it is use one central destination Server-IP.

The Problem with ASA 5580:

If an user is creat a session to the server and no datas will be sent for next 10 min, the session is auto closed from cicso asa. (I know thats a normaly doing of cisco asa firewall but the users dislike this fact.

Before, we filter with cisco router acl and no session table was available on it.

Where are the asa-specialist to show me a way to keeep the session with tcp 9999 and one dest ip in the asa session table for a distance of 8 our min.


THX

 

[North323]

what type of server is making this connection? linux can keep those keep alives. or try writing a script to ping every 8 minutes

 

[xyCruiseryx]

Ping is not TCP.....i think this is not a solution but Thx.

I need a feature to set tcp sessions with special content to keep it in for 8 ours

 

[North323]

i dont think i said the ping was tcp. but ping is considered interesting traffic in keeping and keep create and maintain a connection, socket, or vpn tunnel...

good luck

 

[bannomust]

Hi,
The default session timeout is 30 min for the tcp traffic and unfortuntely this is global configuration so you have to increase the timeout for all the tcp traffic not specifically TCP-9999 port related traffic.

Command to changed the timedout to one hour is as below.

timeout conn 1:00:00 half-closed 0:10:00 udp 0:01:00 icmp 0:00:02


Default Session timeouts are as below.

TCP Timeout: 1800 (Seconds)
UDP Timeout: 180 (Seconds)
ICMP Timeout: 30 (Seconds)

make sure you increase the Xlate timeout also.
timeout xlate 2:00:00



Mustafa Gangardiwala
CCIE-Security # 16253, CISA
CISM,CISSP,INFOSEC, MCSE, CNE

http://netseczone.blogspot.com

 

[xyCruiseryx]

Hi thx for answer. I reat that it is possible ti increase the timeout for spific connections about modular policy framework.

do you have experiences with M P F ?