topic Re: timeout problem with asa5520 v7.2 in Network Security https://community.cisco.com/t5/network-security/timeout-problem-with-asa5520-v7-2/m-p/1323440#M839203 <HTML><HEAD></HEAD><BODY><P>Yes, the ASA control the session timeout, otherwise if a host in the internet just leave the connection (without an RST or FIN) it would be endless active in ASA.</P><P></P><P>You must use a feature in ASA that veryfies the connection by sending packets to both hosts with spoofed information, to see if the respond to that connection.</P><P></P><P>in the link:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html</A></P><P></P><P>look for "DCD"</P><P></P><P>you should use "timeout tcp" option, whith a timeout lower then 30 minutes.</P></BODY></HTML> Tue, 14 Jul 2009 12:28:33 GMT guibarati 2009-07-14T12:28:33Z timeout problem with asa5520 v7.2 https://community.cisco.com/t5/network-security/timeout-problem-with-asa5520-v7-2/m-p/1323439#M839202 <P>Greating</P><P></P><P>My servers behind asa5520 inside interface, seems have problem with timeout.</P><P></P><P>all the sessions from internet to inside servers seems be cut off if user keep idle more than 30 mins.</P><P></P><P>however, the subnet which I did configure the box has not such problems.</P><P></P><P>Could anyone advice me if the ASA5520 can control the session timeout?</P><P></P><P>Any comments will be apprecaited</P><P></P><P>Thanks in advice</P><P></P> Mon, 11 Mar 2019 15:53:38 GMT https://community.cisco.com/t5/network-security/timeout-problem-with-asa5520-v7-2/m-p/1323439#M839202 julxu 2019-03-11T15:53:38Z Re: timeout problem with asa5520 v7.2 https://community.cisco.com/t5/network-security/timeout-problem-with-asa5520-v7-2/m-p/1323440#M839203 <HTML><HEAD></HEAD><BODY><P>Yes, the ASA control the session timeout, otherwise if a host in the internet just leave the connection (without an RST or FIN) it would be endless active in ASA.</P><P></P><P>You must use a feature in ASA that veryfies the connection by sending packets to both hosts with spoofed information, to see if the respond to that connection.</P><P></P><P>in the link:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html</A></P><P></P><P>look for "DCD"</P><P></P><P>you should use "timeout tcp" option, whith a timeout lower then 30 minutes.</P></BODY></HTML> Tue, 14 Jul 2009 12:28:33 GMT https://community.cisco.com/t5/network-security/timeout-problem-with-asa5520-v7-2/m-p/1323440#M839203 guibarati 2009-07-14T12:28:33Z