Cisco Support Community
Community Member

ASA5520 VPN dropping RDP connections


We have been experiencing issues when RDP to a server via L2L VPN Tunnel or/and via Cisco VPN Client.

The issues started to happen since we upgraded an old PIX515E with an ASA5520.

The users only reported RDP problems, for example, The RDP session will hang for 10 seconds and reconnect, or it will freeze for 5 to 10 seconds at random times. We could not find a pattern for this issue. Sometimes happened twice every hour and sometimes won't happened at all.

After opened multiple TAC cases with Cisco VPN specialist, the issue was still on (they couldn't find anything wrong.

So i decided to start searching for similar issues online.

I found a forum with a person describing the same problem with RDP connection running an ASA.

He described he used to have a PIX and no problems, and since they upgrade to an ASA they start having same issues we have.

The good thing is that he found a solution.

He added the following command to the ASA

Timeout conn 0:0:0 (since the Cisco ASA default is 1:0:0) and this fixed the issue for him.

I've added this command yesterday and looks like the we haven't got any issues since then.

Can someone please explain to me what does this command exactly do?

Why this command will fix the RDP issue?

Why this command has to be changed on the ASA from the default when it is not a problem on a PIX?

Hope you can help me,




Re: ASA5520 VPN dropping RDP connections

Hi Zeek,

It Specifies the idle time after which a connection closes, between 0:05:0 and 1193:0:0. The default is 1 hour (1:0:0). Use 0 to never time out a connection.

As for the PIX , this command also existed as default value for connection timeout to be 1 hour (same as ASA):



Community Member

Re: ASA5520 VPN dropping RDP connections

I knew the command definition.

What I need to know, is why the ASA timeout default affects rdp connections, when the pix default does not. I've found other people on the internet with the same exact problem.

Also is the 0:0:0 will affect the performance of the ASA in any other way?

Community Member

Re: ASA5520 VPN dropping RDP connections

Kind of bringing this back from the grave but I'm fighting the same issues. I'm curious, did you end up enabling the "timeout conn 0:0:0" command on your asa? Any performance issues or after effects of that?

CreatePlease to create content