topic Configure ASA 5545 version 9.3 ip tcp synwait-time in Network Security

Configure ASA 5545 version 9.3 ip tcp synwait-time

Eric R. Jones — Tue, 12 Mar 2019 06:04:54 GMT

After doing some research I find that setting up ip tcp synwait-time in the asa isn't as straight forward as it is for a switch.

Apparently I need to create a policy-group to deploy this.

I have seen a couple of examples but haven't read a cisco document on how to setup a policy-group.

I did this for an IAVA for control plane protection but had a nice road map to follow.

Does anyone have a good document explaining the setup and how to do it?

Vibhor Amrodia — Thu, 11 Jun 2015 16:57:56 GMT

Hi,

This would answer your query:-

https://supportforums.cisco.com/discussion/11962691/what-equivalent-implementation-isr-ios-cli-ip-tcp-synwait-time-10-asa-cli

Thanks and Regards,

Vibhor Amrodia

Eric R. Jones — Sun, 21 Jun 2015 00:35:17 GMT

Thanks for the information, we actually found it and deployed it.

For some reason I don't get an email notice when someone replies to a posting here.