topic Re: Global timeouts in Network Security

Global timeouts

adriatikb — Mon, 11 Mar 2019 15:24:03 GMT

Hello to all.

The connection timeouts on ASA firewall are the default ones, so for Idle connection is 1 hour.

My question is : the SSH Idle connection between to hosts on different interfaces of ASA will be disconnect after 1 hour or not? Or after 10 min , time of half open connection?

Best regards

Adriatik

Re: Global timeouts

adriatikb — Mon, 27 Apr 2009 13:29:49 GMT

coud be modified this settings for specific conection ?

Re: Global timeouts

dcheang — Sat, 02 May 2009 03:18:52 GMT

Try this example - I've included a network object group so that you can see how to implement using that as well:

access-list EX-CONN remark Custom timeout policy for Users to not timeout to Exchange

access-list EX-CONN extended permit ip 192.168.1.0 255.255.255.0 object-group ExchangeServers

class-map EX-CONN

description Custom timeout policy for Certain users to Exchange

match access-list EX-CONN

policy-map global_policy

class inspection_default

inspect dns maximum-length 2048

...

class EX-CONN

set connection timeout tcp 9:00:00