SAP servers timing out after 10 mins, please help

[gsriraman]

Dear ALL,

I have an ASA 5510-BUN-K9 installed. We have the following:

Outside interface for Internet

Inside Interface for LAN 192.168.1.0 /23

DMZ 172.20.0.0/28 for mail server

DMZ2 172.30.0.0/27 for SAP servers

ALL user from Windows XP Clients from Inside Interface access the SAP servers on Windows 2003. on TCP Port 3200. However from they get timed out after 10 mins and users have to re login.

This issue however does not happen if we connect from the Windows 2003 machines.

The problem happens only when it passes through a ASA or PIX, both of which we have tried out.

However on a direct LAN to LAN connection, it works beautifully.

Can any one help me

[Patrick Laidlaw]

Hello,

Its probably has something to do with the FIXUP/service-policy. You probably need to increase the timeouts of your tcp sessions for that type of traffic.

Try here for more information on service policys and creating them for application ispections.

http://www.cisco.com/en/US/docs/security/asdm/6_1/user/guide/svcrules.html