idle timeout on FWSM

followurself — Mon, 11 Mar 2019 15:41:24 GMT

hi,

on the inside interface we have a access-list permitting tcp any any. the access-list name is inside..

we have issues with some connections timing out in an hour. these connections are idle in the conn table of fwsm.

how can we ensure the conn to a specific host on any tcp port doesnt get dropped from the FWSM when idle for more then an hour.

this is what we tried

access-list CTI-conn remark Custom timeout policy for softphones not to timeout

access-list CTI-conn extended permit tcp any host CTI-lon

access-list CTI-conn extended permit tcp any host CTI-lon1

class-map CTI-conn

description Custom timeout policy for softphones not to timeout

match access-list CTI-conn

policy-map global_policy

class inspection_default

inspect dns maximum-length 2048

...

class CTI-conn

set connection timeout tcp 9:00:00

but when we do show access-list CTI-conn the hit counts doesnt increase and also the connection timeout in an hour instead of 9.

how to get this working

Thanks

topic idle timeout on FWSM in Network Security