Timeout needs to be extended

[stevenriz]

We have two networks with the firewall in between allowing access. The idle timeout is about an 20 minutes if that and everyone's getting on my back about it. Not being a PIX pro, I can only speculate what line this is. Is this the line???
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00

I don't know what to change. Anyone know what I can do to lengthen the timeout? Thank you very much!
Steve

 

[fliptop]

Yep, thats the correct line (but inc the line above as well - timeout xlate hh:mm:ss).

The timings you have stated are the default timings - they can be changed to suit your needs.

You may want to try extending the TCP half-closed timings - you can use 0:0:0 to never time out a half-closed connection (but its on your own head!!)