Solved: What is the default idle TCP session time out in FWSM

Ganesh Hariharan · ‎02-13-2010

Hi All,

I would like to know what is the default TCP idle session time out in FWSM and if i want to increase this timer what can be impact and security reasons and how can i do also ? and is there any setting in firewall to increase a idle timeout setting for specific port.

Ganesh.H

Jon Marshall · ‎02-15-2010

Ganesh

Have a look at this document -

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080624e19.shtml

Jon

View solution in original post

Jon Marshall · ‎02-13-2010

ganeshh.iyer wrote:

Hi All,

I would like to know what is the default TCP idle session time out in FWSM and if i want to increase this timer what can be impact and security reasons and how can i do also ? and is there any setting in firewall to increase a idle timeout setting for specific port.

Ganesh.H

Ganesh

It should be one hour. You can view the current timeout settings with "sh timeout" or "sh running-config timeout".

Prior to 3.x code the timeout setting was global so if you changed the TCP timeout it affected all tcp connections. However with v3.x code you can now use Modular Policy Framework to set timeouts for specific ports/IP addresses -

FWSM MPF

Jon

Ganesh Hariharan · ‎02-14-2010

Ganesh

It should be one hour. You can view the current timeout settings with "sh timeout" or "sh running-config timeout".

Prior to 3.x code the timeout setting was global so if you changed the TCP timeout it affected all tcp connections. However with v3.x code you can now use Modular Policy Framework to set timeouts for specific ports/IP addresses -

FWSM MPF

Jon

Yes my query is cleared just can you provide some other document also for port based increasing the idle time out session in firewall.

Ganesh.H

Jon Marshall · ‎02-15-2010

Ganesh

Have a look at this document -

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080624e19.shtml

Jon

Ganesh Hariharan · ‎02-15-2010


Ganesh
Have a look at this document -
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080624e19.shtml
Jon

Thanks Jon !!

Ganesh.H

Jon Marshall · ‎02-14-2010

Ganesh

Has this solved your query ?

Jon