02-16-2005 09:07 AM - edited 03-09-2019 10:21 AM
I am experiencing a few problems accessing servers after recently updating the PIX 506E config to enable DNS fixup and alias mappings.
When I attempt to connect to the servers using SSH, there is an extended pause before I receive a login prompt. This is usually the case the first time I try to access the server while subsequent requests may be a littley bit faster. I am more puzzled and bothered by the server dropping the connections. Each connection is timing out after only a few minutes. This was never a problem before making the PIX changes.
Any ideas on what may be happening?
02-22-2005 12:55 PM
Though not directly related, this could be an issue with timers.
03-31-2005 03:03 PM
I have been having the same tcp connection timeout problems. It happens with several different PIX and FWSM units with different software versions. We have determined that it is a 90 second idle period that breaks the connection for the end user. The PIX shows the connection to still be established. As long as a connection is not idle for more than 90 seconds, all is well. As far as I know, there are no 90 second timers on the PIX. It is a problem regardless of which side of the firewall the connection is started on. If the firewall is eliminated from the connection path, there is no problem, so I know the firewall to be the "cause".
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide