topic Configuring timeouts in Network Security

Configuring timeouts

emilioj.romero — Mon, 11 Mar 2019 20:16:59 GMT

Hi All,

I make every week a backup that lasts more than two hours, one of the backup agents remains in idle state over time, to be a tcp connection timeout is set by default to 1 hour.

I changed the configuration of the ASDM conn in Configuration-> Firewall-> Advanced-> Global Timeout and connection to 3:00:00

No problem witch backup, it's all right.

This affects all tcp connections, how I can do to affect only a specific ip and port?

Thanks.

Re: Configuring timeouts

mirober2 — Tue, 05 Apr 2011 14:09:26 GMT

Hi Emilio,

This can be done under the Configuration > Firewall > Service Policy Rules pane. You'll want to add a new service policy and follow the wizard's prompts to match only your backup traffic (choose "Source and Destination IP Address (uses ACL) for Step 2 - Traffic Classification Criteria).

On the CLI, it will look like the following:

access-list backup-acl permit tcp host  host  eq 
class-map backup-class
    match access-list backup-acl
policy-map backup-policy
    class backup-class
         set connection timeout idle 
service-policy backup-policy interface

This will only apply the idle timer to the traffic matched by the ACL.

Hope that helps.

-Mike

Re: Configuring timeouts

emilioj.romero — Tue, 05 Apr 2011 14:16:42 GMT

Thank you very much, i go to do it