A single TIMEOUT drops Remote-Desktop Session on ASA

[Imran Ahmad]

Hello Guys,

Just recently we replaced our HQ Cisco-Pix with Cisco-ASA 5510.  where we have many branches connecting to our HQ through site-to-site vpn.

Since putting this new ASA5510 at HQ , while we are getting a  Remote-Desktop session  into our branches clients, and at the time when even a single TIMEOUT occurs on the vpn-link  so the remote-desktop session   gets completly lost.  then we have to re-connect the session.

This issue happens as i said above  when a single  timeout  occurs on the vpn link.   please tell me what is the issue with the ASA5510. because with pix we didnt have this issue,  remote-desktops were never geting lost / reset  with single  timeout

[Maykol Rojas]

Imran,

Thank you for posting this question.  Now, we need a little bit more clarification into what you call TIMEOUT, The ASA wont drop a flow unless there is no data passing through within an Hour (If it is TCP). Does the tunnel goes down completely and the SA has to be rebuild?

What are the logs that you are seeing? What is the ASA saying about that terminated connection? As you rightly pointed, there should not be mayor differences between the devices (Assuming they were running version 8.2 or below).

Mike