09-16-2004 04:40 AM - edited 02-20-2020 11:37 PM
My Pix 515E model tears down my TCP connections in 4 in a very short about 4 seconds even though the timeout conn half-closed is 0:10:00 (10 minutes). How can I prevent the Pix box from tearing down my tcp connnections so fast? Below are my timeout settings:
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
arp timeout 14400
telnet timeout 5
ssh timeout 5
09-16-2004 06:31 AM
Can you provide an example of what you are talking about? Syslogs with timestamps would be the best way to illustrate this.
Scott
09-16-2004 10:43 AM
It turns out that this could be a problem with the application I am using - it's unable to connect to my server using ip addresses and has to use computer names (DNS). But I don't know how to set the Pix to allow clients to use computer names (i.e., DNS names). Any ideas how to do this?
09-16-2004 11:03 AM
DNS is UDP/TCP port 53. This has to be allowed through firewall. Workstations must point to a valid DNS server.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide