<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic MPF Connection Timeout in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/mpf-connection-timeout/m-p/1330420#M859151</link>
    <description>&lt;P&gt;Will the following MPF configuration override the existing connection timeout value for connections originating from 1.1.1.1?(obviously for TCP connections only)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list custom_timeout extended permit tcp host 1.1.1.1 any &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; class-map custom_timeout                                     &lt;/P&gt;&lt;P&gt; description Connection Timeout for specific hosts - 3 hours &lt;/P&gt;&lt;P&gt; match access-list custom_timeout    &lt;/P&gt;&lt;P&gt;                        &lt;/P&gt;&lt;P&gt; policy-map global_policy                                         &lt;/P&gt;&lt;P&gt;  class inspection_default                                        &lt;/P&gt;&lt;P&gt;   inspect ftp                                                    &lt;/P&gt;&lt;P&gt;   inspect h323 h225                                              &lt;/P&gt;&lt;P&gt;   inspect h323 ras                                               &lt;/P&gt;&lt;P&gt;   inspect rsh                                                    &lt;/P&gt;&lt;P&gt;   inspect rtsp                                                   &lt;/P&gt;&lt;P&gt;   inspect sqlnet                                                 &lt;/P&gt;&lt;P&gt;   inspect skinny                                                 &lt;/P&gt;&lt;P&gt;   inspect sunrpc                                                 &lt;/P&gt;&lt;P&gt;   inspect xdmcp                                                  &lt;/P&gt;&lt;P&gt;   inspect sip                                                    &lt;/P&gt;&lt;P&gt;   inspect netbios                                                &lt;/P&gt;&lt;P&gt;   inspect tftp                                                   &lt;/P&gt;&lt;P&gt;  class custom_timeout                                       &lt;/P&gt;&lt;P&gt;   set connection timeout tcp 03:0:00 reset                      &lt;/P&gt;&lt;P&gt;                                                                  &lt;/P&gt;&lt;P&gt;                                                                  &lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 15:47:14 GMT</pubDate>
    <dc:creator>Patrick0711</dc:creator>
    <dc:date>2019-03-11T15:47:14Z</dc:date>
    <item>
      <title>MPF Connection Timeout</title>
      <link>https://community.cisco.com/t5/network-security/mpf-connection-timeout/m-p/1330420#M859151</link>
      <description>&lt;P&gt;Will the following MPF configuration override the existing connection timeout value for connections originating from 1.1.1.1?(obviously for TCP connections only)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list custom_timeout extended permit tcp host 1.1.1.1 any &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; class-map custom_timeout                                     &lt;/P&gt;&lt;P&gt; description Connection Timeout for specific hosts - 3 hours &lt;/P&gt;&lt;P&gt; match access-list custom_timeout    &lt;/P&gt;&lt;P&gt;                        &lt;/P&gt;&lt;P&gt; policy-map global_policy                                         &lt;/P&gt;&lt;P&gt;  class inspection_default                                        &lt;/P&gt;&lt;P&gt;   inspect ftp                                                    &lt;/P&gt;&lt;P&gt;   inspect h323 h225                                              &lt;/P&gt;&lt;P&gt;   inspect h323 ras                                               &lt;/P&gt;&lt;P&gt;   inspect rsh                                                    &lt;/P&gt;&lt;P&gt;   inspect rtsp                                                   &lt;/P&gt;&lt;P&gt;   inspect sqlnet                                                 &lt;/P&gt;&lt;P&gt;   inspect skinny                                                 &lt;/P&gt;&lt;P&gt;   inspect sunrpc                                                 &lt;/P&gt;&lt;P&gt;   inspect xdmcp                                                  &lt;/P&gt;&lt;P&gt;   inspect sip                                                    &lt;/P&gt;&lt;P&gt;   inspect netbios                                                &lt;/P&gt;&lt;P&gt;   inspect tftp                                                   &lt;/P&gt;&lt;P&gt;  class custom_timeout                                       &lt;/P&gt;&lt;P&gt;   set connection timeout tcp 03:0:00 reset                      &lt;/P&gt;&lt;P&gt;                                                                  &lt;/P&gt;&lt;P&gt;                                                                  &lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 15:47:14 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/mpf-connection-timeout/m-p/1330420#M859151</guid>
      <dc:creator>Patrick0711</dc:creator>
      <dc:date>2019-03-11T15:47:14Z</dc:date>
    </item>
    <item>
      <title>Re: MPF Connection Timeout</title>
      <link>https://community.cisco.com/t5/network-security/mpf-connection-timeout/m-p/1330421#M859152</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Definately as it is more precise&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 24 Jun 2009 05:37:46 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/mpf-connection-timeout/m-p/1330421#M859152</guid>
      <dc:creator>svaish</dc:creator>
      <dc:date>2009-06-24T05:37:46Z</dc:date>
    </item>
  </channel>
</rss>

