ASA connection timeout
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2010 01:37 PM - edited 03-11-2019 10:14 AM
Hi All,
there are two connection timeout on ASA:
#timeout connection ...
and the other one through class-map/policy-map with:
#set connection timeout ....
if we have both, I guess class-map/policy-map has higher priority.
any suggestion would be very appreciated as always.
Alex
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2010 01:49 PM
Alex,
What is the question? Are you asking which one is preferred?
If you want to allow specific timeout setting for a certain flow, that is only possible via MPF.
http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s1.html#wp1424605
-KS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2010 01:53 PM
thanks for the reply.
we have both configuration in ASA. does "set connection timeout" in MPF override the "timeout" command?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-24-2010 01:57 PM
Yes.
-KS
