Applications are timing out and firewalls are dropping connections

Products

• ProxySG Software - SGOS
• Advanced Secure Gateway Software - ASG
• ISG Proxy

Issue/Introduction

SGOS has a TCP idle timer. This may cause some applications to break or result in firewalls dropping connections due to the timeout.

Cause

By default, SGOS will only send TCP keep-alives after 7200 seconds.

Resolution

SGOS has the flexibility to adjust the TCP keepalive (idle) timer in a hidden command.

To overwrite the default timer in SGOS 6.7.x and in SGOS 7.3.6.1 and earlier, execute the following on the CLI:

ProxySG> en
ProxySG# config t
ProxySG#(config) tcp-ip tcp-keepalive-timeout N

Replace N with the preferred timeout value in seconds.

To overwrite the default timer in SGOS 7.3.7.1 and later, execute the following on the CLI:

ProxySG> en
ProxySG# config t
ProxySG#(config) tcp-ip tcp-keepalive-idle N

Replace N with the preferred timeout value in seconds.