topic Pinhole timeout in Network Security

Pinhole timeout

lcaruso — Mon, 11 Mar 2019 21:14:20 GMT

Hi,

What does a pinhole timeout indicate?

Aug 19 2011 07:44:22: %ASA-6-302014: Teardown TCP connection 54522 for outside:192.168.25.22/0 to inside:192.168.125.12/49158 duration 0:02:01 bytes 0 Pinhole timeout

Aug 19 2011 07:44:22: %ASA-6-302014: Teardown TCP connection 54523 for outside:192.168.25.22/0 to inside:192.168.125.12/49155 duration 0:02:01 bytes 0 Pinhole timeout

ASA 5505 8.4(2)

Thanks.

Pinhole timeout

varrao — Fri, 19 Aug 2011 13:44:12 GMT

Here is the explanation:

Pinhole Timeout

The counter is incremented to report that the ASA opened a secondary flow, but no packets passed through this flow within the timeout interval, and so it was removed. An example of a secondary flow is the FTP data channel that is created after successful negotiation on the FTP control channel.

If you need to check any syslogs, kindly use this guide:

http://www.cisco.com/en/US/customer/docs/security/asa/asa84/system/message/logmsgs.html

Hope this helps.

Thanks,

Varun

Pinhole timeout

lcaruso — Fri, 19 Aug 2011 14:12:55 GMT

Thanks for the link.

Link broken!! :(

jose.ibanezvela — Wed, 03 Feb 2016 09:16:29 GMT

Link broken!! 😞