Anyconnect VPN via Firepower 2100 - Oracle timed out and disconnects in idle

[ari82]

Hi,

we are using a Firepower 2100 series in Version  6.4.0.6 and Anyconnect for RAS Client Login.

So as users opens database connections to our Oracle Servers, they will get an automatic disconnect from ORACLE after, i think 15minutes not using the ORACLE Connection.

Only the Oracle Connection is closed, VPN Connection still works and is allready in use meanwhile the 15 minutes, only the Oracle Datebase Connection is idle.

On the old ASA there was a way to define ServicePolicys and configure different keepalive Option for this case.
But Firepower don't offer some settings for that.

[Marvin Rhoads]

You can change the value of tcp timeouts in Firepower Management Center.It's a service-policy setting just like it was in the ASA.

Here is a link to the Config Guide section telling you how:

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/threat_defense_service_policies.html#id_71062