topic problems with applications over vpn ipsec site-to-site in Network Security https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084242#M975801 <P>Hi all,</P><P>I have some problems with some applications as Xcics and Citrix when client and server are connected through a vpn site-to-site. Clients don't seem to have any problem to connect to the server, but after a period of time, they disconnect even if users are working. Session is not closed correctly on server and stay hung, so users can't connect if the administrator doesn't close the session on the server. Some vpns pass through a Pix515E, others pass through a fwsm and an ASA5510. Does anyone knows something about this issue?</P> Fri, 21 Feb 2020 11:04:29 GMT gdspa 2020-02-21T11:04:29Z problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084242#M975801 <P>Hi all,</P><P>I have some problems with some applications as Xcics and Citrix when client and server are connected through a vpn site-to-site. Clients don't seem to have any problem to connect to the server, but after a period of time, they disconnect even if users are working. Session is not closed correctly on server and stay hung, so users can't connect if the administrator doesn't close the session on the server. Some vpns pass through a Pix515E, others pass through a fwsm and an ASA5510. Does anyone knows something about this issue?</P> Fri, 21 Feb 2020 11:04:29 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084242#M975801 gdspa 2020-02-21T11:04:29Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084243#M975802 <HTML><HEAD></HEAD><BODY><P>Have you enabled isakmp keepalives?</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Tue, 04 Nov 2008 11:11:17 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084243#M975802 Farrukh Haroon 2008-11-04T11:11:17Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084244#M975804 <HTML><HEAD></HEAD><BODY><P>Yes, and I have a software to monitor the connections which sends a ping every 1 minute. Disconnections happen when users are working, not after a period of inactivity.</P></BODY></HTML> Thu, 06 Nov 2008 14:59:16 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084244#M975804 gdspa 2008-11-06T14:59:16Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084245#M975806 <HTML><HEAD></HEAD><BODY><P>Try increasing theses values..</P><P></P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00</P></BODY></HTML> Fri, 07 Nov 2008 14:12:07 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084245#M975806 ssandifer 2008-11-07T14:12:07Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084246#M975808 <HTML><HEAD></HEAD><BODY><P>I have controlled with ASDM.Values you indicate are unchecked on my firewall. ASDM guide says "unchecking the check</P><P>boxes means there is no timeout value", so the problem is not caused by timeouts, is it?</P></BODY></HTML> Fri, 14 Nov 2008 14:06:08 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084246#M975808 gdspa 2008-11-14T14:06:08Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084247#M975809 <HTML><HEAD></HEAD><BODY><P>I resolved the problem configuring connection timeout = 2 hours.</P></BODY></HTML> Thu, 29 Apr 2010 07:09:28 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084247#M975809 gdspa 2010-04-29T07:09:28Z Re: problems with applications over vpn ipsec site-to-site https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084248#M975810 <HTML><HEAD></HEAD><BODY><P>problem solved, see my post of 29-apr-2009</P></BODY></HTML> Wed, 21 Jul 2010 07:19:33 GMT https://community.cisco.com/t5/network-security/problems-with-applications-over-vpn-ipsec-site-to-site/m-p/1084248#M975810 gdspa 2010-07-21T07:19:33Z