ASA sysopt commands

[cnienhuis]

Does anyone know if turning on the

sysopt connection timewait

option an ASA will affect any current traffic if it is already on production.  Just crossing the T's here.

[Jennifer Halim]

Yes, it will affect the current traffic as it extends the connection for an extra 15 seconds after receiving the last packet of TCP connection (either RST or FIN-ACK).

[cnienhuis]

Thanks for the reply.

I understand that it will extend the connection but will it drop any exsiting connections?  In other words will the users be impacted adversly?

[Jennifer Halim · Accepted solution]

No, it shouldn't drop any existing connections.

I would still configure it after hours just to be on the safe side. The command shouldn't drop any existing connections though.

[cnienhuis]

thanks that worked