Impact to decrease tcp idle connection timer on system

[Otgonbayar Mijiddorj]

Hi,

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

As i understood, timeout conn is idle session timeout not a session lifetime. Am I correct?

if so, what are the impacts on system to decrease idle session timeout?

I heard that more hardware resource will be required to create a connection again on the system if we set low value for idle conn timer. is that correct?

Thanks.

Oogii

[Philip D'Ath]

The first question is what problem are you trying to solve?  Why would you want to do this?

[Otgonbayar Mijiddorj]

Hi Philip,

Number of connection is reached the limit of my ASA firewall. That is why I am looking for solution to decrease number of connection to tune tcp idle time. And i would like to know impacts on system to decrease idle session timeout.

Thanks,

oogii

[Philip D'Ath · Accepted solution]

Damm.

I would halve the "half-closed" number from 10 minutes to 5 minutes.

[Otgonbayar Mijiddorj]

Thanks Philip,

That would be help to decrease number of connection and it has lower impact.