topic Re: What is the default timeout value for PIX to terminate an id in Network Security https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577382#M526036 <HTML><HEAD></HEAD><BODY><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#wp1026093" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#wp1026093</A></P><P></P><P>Usage Guidelines</P><P></P><P>The timeout command sets the idle time for connection, translation UDP, RPC, and H.323 slots. If the slot has not been used for the idle time specified, the resource is returned to the free pool. TCP connection slots are freed approximately 60 seconds after a normal connection close sequence. </P><P></P><P>pixfirewall# sh timeout</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00</P><P>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00</P><P>timeout sip-disconnect 0:02:00 sip-invite 0:03:00</P><P>timeout uauth 0:05:00 absolute</P><P></P></BODY></HTML> Tue, 28 Mar 2006 01:56:00 GMT wsitu 2006-03-28T01:56:00Z What is the default timeout value for PIX to terminate an idle TCP connecti https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577380#M526034 <P>What is the default timeout value for PIX to terminate an idle TCP connection - Is it 15 minutes. I vaguely recall it is 15 minutes.</P> Fri, 21 Feb 2020 08:48:09 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577380#M526034 astanislaus 2020-02-21T08:48:09Z Re: What is the default timeout value for PIX to terminate an id https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577381#M526035 <HTML><HEAD></HEAD><BODY><P>I believe the TCP connection slot is freed up 60 seconds after the TCP connection is closed.</P><P></P><P>Hope that helps - pls rate the post if it does.</P><P>Paresh</P></BODY></HTML> Tue, 28 Mar 2006 01:38:20 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577381#M526035 pkhatri 2006-03-28T01:38:20Z Re: What is the default timeout value for PIX to terminate an id https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577382#M526036 <HTML><HEAD></HEAD><BODY><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#wp1026093" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/tz.htm#wp1026093</A></P><P></P><P>Usage Guidelines</P><P></P><P>The timeout command sets the idle time for connection, translation UDP, RPC, and H.323 slots. If the slot has not been used for the idle time specified, the resource is returned to the free pool. TCP connection slots are freed approximately 60 seconds after a normal connection close sequence. </P><P></P><P>pixfirewall# sh timeout</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00</P><P>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00</P><P>timeout sip-disconnect 0:02:00 sip-invite 0:03:00</P><P>timeout uauth 0:05:00 absolute</P><P></P></BODY></HTML> Tue, 28 Mar 2006 01:56:00 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577382#M526036 wsitu 2006-03-28T01:56:00Z Re: What is the default timeout value for PIX to terminate an id https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577383#M526037 <HTML><HEAD></HEAD><BODY><P>The TCP connection is still active between a Server and Client but no traffic is being passed - what happens then. Does the PIX close the connection after a certain time interval of no traffic.</P></BODY></HTML> Tue, 28 Mar 2006 03:09:58 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577383#M526037 astanislaus 2006-03-28T03:09:58Z Re: What is the default timeout value for PIX to terminate an id https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577384#M526039 <HTML><HEAD></HEAD><BODY><P>i think in this case the pix is going to keep that connection up default to 1 hour. it will close that connection to free up memory.</P><P></P><P>remember: pix is a stateful firewall. it maintains a history of traffic passed through and keeps track of tcp sequences, SYN, SYN/ACK, ACK, and etc. it will recognize a FIN when the connection terminates gracefully and cloe a connection.</P><P></P><P>check out these commands:</P><P>show xlate</P><P>show conn detail</P><P></P></BODY></HTML> Tue, 28 Mar 2006 09:00:20 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577384#M526039 wsitu 2006-03-28T09:00:20Z Re: What is the default timeout value for PIX to terminate an id https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577385#M526040 <HTML><HEAD></HEAD><BODY><P>By default it's an hour, but issue a 'show timeout' command to see what your PIX is set to.</P></BODY></HTML> Tue, 28 Mar 2006 16:29:17 GMT https://community.cisco.com/t5/network-security/what-is-the-default-timeout-value-for-pix-to-terminate-an-idle/m-p/577385#M526040 mloring 2006-03-28T16:29:17Z