I have a small issue with my Cisco PIX 515E running a ipsec tunnel from cisco pix to a check point firewall. The only traffic that is passing through this tunnel is just SSL traffic for our outlook email clients connecting to an exchange server through RPC HTTPS. But what I am noticing is that I am receiving TCP Reset-O in my loggs about every 26 to 28 minutes and I believe that creates a domino affect because then I start seeing TCP Reset-I from client connections; but I believe the TCP Reset-O starts the affect. I know that TCP Reset-O means that the connection is being reset from the outside server but I was wondering if creating a policy-map on the cisco pix extending the the timeout-session for all SSL traffic going through the ipsec tunnel to last 6hrs or more because I am also noticing that the outlook email clients establish a 12 SSL connection per user going to the exchange server over ipsec tunnel so I want the timeout value to be for a while. I think the issue is on the checkpoint killing the connection after a certain time period but if its not I was wondering if anyone had any suggestions how to resolve tcp connection issues timing out?