topic extend SSH remote session to prevent quick timeout in Network Security

extend SSH remote session to prevent quick timeout

yong khang NG — Mon, 11 Mar 2019 23:37:31 GMT

Hvaing problem on my Apps team keep on complaint their remote SSH session keep on timeout.

Just wondering anything i can do in order to extend their SSH remote session to their Oracle application server 10g.

thanks

Noel

mkdccie — Thu, 02 Aug 2012 10:54:09 GMT

Hi Noel,

Is this SSH session passing throught the ASA to the oracle?

Regards,

MKD

yong khang NG — Thu, 02 Aug 2012 11:12:08 GMT

Hi Mohammed,

Yes, traffic logically go though Firewall, firewall as the gateway.

thanks

mkdccie — Thu, 02 Aug 2012 11:38:24 GMT

Hi Noel,

Are you sure that the ASA drop the ssh session? how? any logs?

Is the session drop when no traffic? or what?

Regards,

MKD

mkdccie — Thu, 02 Aug 2012 11:48:58 GMT

Hi Noel,

Try to change the tcp timeout global configuration which will resolve your ssh timeout issue. The default timeout is 30 min.

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

Plz rate if its helpful.

Regards,

MKD

hobbe — Thu, 02 Aug 2012 12:04:59 GMT

what type of SSH software are they using ? it could be that the software is not sending keepalive packets.

If it is possible then you can set the software to send "keep alive" packets to keep the tunnel active even if the user does nothing for a while.

fx in putty this is done under connection and there you have

enable tcp keepalive

and

sending of null packets to keep session active

set this number to fx 50 ie 50 seconds between null packets to be sent within the keepalive.

Good luck

Hope This Helps