VPN idle timeout

[Daniel Espley]

Hello,

I have idle timeout set to 10 mins for our IPSEC vpn group, however the tunnels are not disconnected when idle because data is still being sent/received by something.  i checked the statistics for the vpn client and can see bytes being sent/recieved.  any idea on what data this might be as i ahve nothing else open or using the tunnel - i am running windows 7 with cisco vpn client connecting to ASA5505.

thanks

[Marcin Latosiewicz]

Daniel,

It could be  a baunch of stuff:

- broadcasts

- connected shares

- idle TCP sessions exchanging keepalives.

- background updates

You can check on the client itself via netstat command or on ASA using

show conn det address ASSIGNED_IP_ADD_RESS_OF_CLIENT 

M.