ASA 5510 with Timeclock Timing Out on Download

[dholdgrafer]

We have a time clock that is timing out on the downloads. The company believes it is a TCP connection timeout, and it looks to me like the TCP connection gets a RESET-O after 4 min and 15 sec based on the session logs. At which point a RST ack is sent from the local device but is denied with Deny TCP (no connection). Any idea as to where we can start looking to extend the TCP session?

The connection is going through an ASA 5510.

Thanks!

[Vibhor Amrodia]

Hi,

TCP RESET-O would mean that the connection is being terminated from the outside.

Is that expected ? If yes , i don't think extending this connection will solve the issue.

You can use this command:- sysopt connection timewait which is disabled by default

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s17.html#pgfId-1572802

Also , you can change the timeout for the connections for specific IP's:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_connlimits.html

Thanks and Regards,

Vibhor Amrodia