Configure ASA 5545 version 9.3 ip tcp synwait-time

[Eric R. Jones]

After doing some research I find that setting up ip tcp synwait-time in the asa isn't as straight forward as it is for a switch.

Apparently I need to create a policy-group to deploy this.

I have seen a couple of examples but haven't read a cisco document on how to setup a policy-group.

I did this for an IAVA for control plane protection but had a nice road map to follow.

Does anyone have a good document explaining the setup and how to do it?

ej

[Vibhor Amrodia · Accepted solution]

Hi,

This would answer your query:-

https://supportforums.cisco.com/discussion/11962691/what-equivalent-implementation-isr-ios-cli-ip-tcp-synwait-time-10-asa-cli

Thanks and Regards,

Vibhor Amrodia

[Eric R. Jones]

Thanks for the information, we actually found it and deployed it.

For some reason I don't get an email notice when someone replies to a posting here.

ej