Connection Idle time in PIX

[gchui]

Dear,

If I configure connection idle timer in PIX to never by command "timeout conn 0:0:0", can I manually clear the connection slot stored in PIX? In this suitation, is it the connection slot will only be free after a normal TCP close process take place?

Gary

[m.singer]

TCP connections that are not properly torn down with a FIN or RST will never be removed from the PIX.

Also note, that once you get enough connections, you will eat up all the available RAM, so no new connections will be created.