An interesting issue came up for me. I have an ACL that allowed host A to Host B on port 636. The firewall have a tcp session timeout of 2 hours. Host A established a sesson with B did some transfer and went idle. It then tried to send data again after 3 hours without going through TCP handshake (reusing the same source port). Will the firewall allow it through even though it passed the session timeout ? Does the firewall just matches the source IP, dest IP and dest port without looking to see if it see handsake?
Thanks in advance.
