Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

ASA 5510 with Timeclock Timing Out on Download

We have a time clock that is timing out on the downloads. The company believes it is a TCP connection timeout, and it looks to me like the TCP connection gets a RESET-O after 4 min and 15 sec based on the session logs. At which point a RST ack is sent from the local device but is denied with Deny TCP (no connection). Any idea as to where we can start looking to extend the TCP session?

 

The connection is going through an ASA 5510.

 

Thanks!

1 REPLY
Cisco Employee

Hi,TCP RESET-O would mean

Hi,

TCP RESET-O would mean that the connection is being terminated from the outside.

Is that expected ? If yes , i don't think extending this connection will solve the issue.

You can use this command:- sysopt connection timewait which is disabled by default

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s17.html#pgfId-1572802

Also , you can change the timeout for the connections for specific IP's:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_connlimits.html

Thanks and Regards,

Vibhor Amrodia

44
Views
0
Helpful
1
Replies
CreatePlease to create content