An xlate is a dynamic NAT, a conn is a tcp connection. You always want the xlate timeout value to be higher than the conn timeout. And you are correct, the idle tcp will be terminated by the conn timeout. Once the xlate timeout expires, the inside IP can/will be nat'd to a different global IP next time it issues new traffic.
it silently discard the connection. There are no RST send to source/destination. The role is to clear from memory "dead" connections. A normal terminated connection (rst-rstack) is cleared from pix memory at that time. This timeout should not be set to low cause it will kill long ftp transfers and so on.
Timeout for xlate clear also all reference about a host including up connections.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...