topic Hi Philip, in Network Security

Impact to decrease tcp idle connection timer on system

Otgonbayar Mijiddorj — Tue, 12 Mar 2019 07:10:20 GMT

Hi,

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

As i understood, timeout conn is idle session timeout not a session lifetime. Am I correct?

if so, what are the impacts on system to decrease idle session timeout?

I heard that more hardware resource will be required to create a connection again on the system if we set low value for idle conn timer. is that correct?

Thanks.

Oogii

The first question is what

Philip D'Ath — Thu, 21 Jan 2016 04:08:34 GMT

The first question is what problem are you trying to solve? Why would you want to do this?

Hi Philip,

Otgonbayar Mijiddorj — Thu, 21 Jan 2016 06:08:24 GMT

Hi Philip,

Number of connection is reached the limit of my ASA firewall. That is why I am looking for solution to decrease number of connection to tune tcp idle time. And i would like to know impacts on system to decrease idle session timeout.

Thanks,

oogii

Damm.

Philip D'Ath — Thu, 21 Jan 2016 06:12:17 GMT

Damm.

I would halve the "half-closed" number from 10 minutes to 5 minutes.

Thanks Philip,

Otgonbayar Mijiddorj — Thu, 21 Jan 2016 07:57:08 GMT

Thanks Philip,

That would be help to decrease number of connection and it has lower impact.