Filter
Top Products
55-5
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 55 Configuring Security Policies on Firewall Devices
Configuring Timeouts
Field Reference
Table 55-3 Timeouts Page
Element Description
To change the timeout value for a parameter, click the radio button to the left of the parameter entry to
activate it, and then enter the new value in the parameter field. To reset any value to its default, click
the related Default button.
Clicking the Disable button, where provided, disables the timeout by setting its value to 0:00:00.
Follow either of the procedures in the previous paragraph to re-enable a disabled value.
Translation Slot (xlate) Length of time idle until a translation slot is freed. This value must be
at least 1 minute; the default is3 hours. Enter 0:0:0 to disable this
timeout.
Connection (conn) Length of time idle until a connection slot is freed. This value must be
at least 5 minutes; the default is 1 hour. Click Disable or enter 0:0:0 to
disable this timeout.
Half-Closed Length of time idle until a half-closed TCP connection is closed. The
minimum is 5 minutes; the default is 10 minutes. Click Disable or enter
0:0:0 to disable this timeout.
UDP Length of time idle until a UDP protocol connection is closed. This
value must be at least 1 minute; the default is 2 minutes. Click Disable
or enter 0:0:0 to disable this timeout.
ICMP (PIX 7.x+, ASA,
FWSM 3.x+)
Length of time idle after which general ICMP states are closed.
RPC/Sun RPC Length of time idle until a SunRPC slot is freed. This value must be at
least 1 minute; the default is 10 minutes. Click Disable or enter 0:0:0 to
disable this timeout.
H.225 Length of time idle until an H.225 signaling connection is closed. The
H.225 default timeout is 1 hour (01:00:00). Setting the value to
00:00:00 means never close the connection. To close a connection
immediately after all calls are cleared, enter 1 second (00:00:01).
H.323 Length of time idle until an H.323 media connection is closed. The
default is 5 minutes. Click Disable or enter 0:0:0 to disable this timeout.
MGCP Length of time idle after which MGCP media ports are closed. The
default is 5 minutes (00:05:00). Click Disable or enter 0:0:0 to disable
this timeout.
MGCP PAT (PIX 7.x+, ASA,
FWSM 3.x+)
Length of time idle after which an MGCP PAT translation is removed.
The minimum time is 30 seconds; the default is 5 minutes (00:05:00).
Click Disable or enter 0:0:0 to disable this timeout.
SIP Length of time idle until an SIP signaling port connection is closed.
This value must be at least 5 minutes; the default is 30 minutes. Click
Disable or enter 0:0:0 to disable this timeout.
SIP Media Length of time idle until an SIP media port connection is closed. This
value must be at least 1 minute; the default is 2 minutes. Click Disable
or enter 0:0:0 to disable this timeout.