Before setting 'timeout conn 8:00:00' from I think 10min the vpn client would timeout often. Now that's pretty good the client tunnel stays open.
Since then I've also added 'isakmp keepalive 10' to the pix and 'ForceKeepalives=1' in the client config. So I'm wondering if I can put the timeout conn back down?
Last question... If I connect to the vpn from my windows machine, loggof that, and then connect from another machine behind the same ip with the same id and pw I get to login, I get the same IP the windows machine had but I can't ping or connect to anything for about 10 to 20 min's. The pix logs all have '%PIX-6-106015: Deny TCP (no connection)' and then that stops and the connection works... any ideas on that one?