Q: PIX 501 Session Leases

[cyee]

I have read that PIX 501s (with 10 | 50 license limits) have experienced problems where connection "leases" were not released and sessions were refused because the license limits were reached.

Question: What is the trigger mechanism that causes a lease to be released? Is it a simple time-out or some other parameter? If a time-out, what command is used to control the period?

[charter]

The timeout is the problem, it never does. You need to upgrade to 6.1(104) or 6.2. I had the same problem. Whenever a host tries to talk to an inside host (even if the host doesn't exist), an entry gets created in the Pix's local-hosts table and stays there forever. You have to do a clear local-hosts to correct it.