Increase TCP or UDP connection timeout for specific connections

Description

In certain occasions you may need to increase the TCP or UDP timeout for a specific connection.

EXAMPLE: If VoIP connections timeout after 60 seconds we would adjust the firewall rule for VoIP traffic and change the UDP timeout value to 60 seconds. 

By default, the TCP connection timeout is 15 minutes and the UDP connection timeout 30 seconds. In order to increase the connection timeout you can modify it from the firewall access rules.

NOTE:The following scenario describes how to modify the TCP connection timeout for a Site-to-Site VPN between 2 SonicWalls.

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Navigate to Policy | Rules and Policies | Access Rules and click the option highlighted in the image below to enter the matrix view.

Image

Image

  1. Click on the configure icon for the LAN | VPN zone intersection.
  2. On the page that appears, you will see the rules for the SonicWall subnets to the remote SonicWall's subnets that were auto-created when you created the VPN policy.

Image

      3. For the specific policy or policies, click  Configure button located on the right-hand side and click on the                            Advanced tab.

      4. From there, you can adjust the TCP or UDP connection inactivity timeout.

Image

      5. When done. Click Save.

      6. Return to the matrix view style and click on the configure icon for the VPN | LAN intersection.

Image

      7. On the page that appears, you will see the rules for the remote SonicWall's subnets to the SonicWall's subnets                 that were auto-created when you created the VPN policy.

      8. Follow the same steps as before to modify the connection inactivity timeout.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

  1. After logging into the GUI , click MANAGE.
  2. Navigate to Policies | Rules | Access Rules and click the option highlighted in the image below to enter the matrix view.


Image
Image

  1. Click on the configure icon for the LAN | VPN zone intersection.
  2. On the page that appears, you will see the rules for the SonicWall's subnets to the remote SonicWall's subnets that were auto-created when you created the VPN policy.Image
  3. For the specific policy or policies, click  Configure button located on the right-hand side and click on the Advanced tab.
  4. From there, you can adjust the TCP or UDP connection inactivity timeout.
    Image
  5. When done. click OK.
  6. Return to the matrix view style and click on the configure icon for the VPN | LAN intersection.
    Image
  7. On the page that appears, you will see the rules for the remote SonicWall's subnets to the SonicWall's subnets that were auto-created when you created the VPN policy.
  8. Follow the same steps as before to modify the connection inactivity timeout.

Related Articles

  • SonicWall UTM throws an error : " Invalid Authentication " Error: SN and EPAID Do Not Match
    Read More
  • Firewall logs show frequent probe status changes after upgrade
    Read More
  • SSO Agent 4.0: Installation, Configurations, and troubleshooting
    Read More
not finding your answers?
was this article helpful?