ASA connection timeout

[alex goshtaei]

Hi All,

there are two connection timeout on ASA:

#timeout connection ...

and the other one through class-map/policy-map with:

#set connection timeout ....

if we have both, I guess class-map/policy-map has higher priority.

any suggestion would be very appreciated as always.

Alex

[Kureli Sankar]

Alex,

What is the question? Are you asking which one is preferred?

If you want to allow specific timeout setting for a certain flow, that is only possible via MPF.

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s1.html#wp1424605

-KS

[alex goshtaei]

thanks for the reply.

we have both configuration in ASA. does  "set connection timeout" in MPF override the "timeout" command?

[Kureli Sankar]

Yes.

-KS