Think carefully about the implications of having a session that never times out. What would happen if the session was not properly closed down by the client/server? Your connection tables would eventually fill up with old connections.

The right solution for this problem (better than changing the timeout) is to look into the tcp_keepalive_interval on the server. Many OSes default to 2 hours for sending a keepalive. If you reduce this to less than 1 hour (the default Check Point timeout), then they will send at least one keepalive packet every hour, meaning that the firewall will reset the timer for that connection. Presto! No more connection timeout.

 - Lindsay


On 9 Dec 2005, at 09:14, Tauseef Khan wrote:

The maximum time you can set in session tomeout field is 86400 seconds.
Is there any way on NG R55 that session never times out.
Kind regards
Tauseef

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Lars
Troen
Sent: 08 December 2005 10:56
To: [email protected]
Subject: Re: [FW-1] Telnet session times out


Manage / Services / telnet /Advanced / Session timeout


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf
Of Tauseef Khan
Sent: 8. desember 2005 10:35
To: [email protected]
Subject: [FW-1] Telnet session times out

Hi All

I am running NG FP1 on a Nokia ip120. I put a UNIX server
behind the this Nokia and now the telnet session to UNIX
server timeout after every 10 minutes or so.  I would
appreciate if someone could help.
Kind regards



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================


*************************************************
For addressee only. No legally binding commitments will be created by this e-mail message. Where we intend to create legally binding commitments these will be made through hard copy correspondence or documents.

3i Investments plc
Registered office: 91 Waterloo Road
                             London SE1 8XP
Registered no:3975789
Authorised and Regulated by the Financial Services Authority

If you are not the intended recipient it may be unlawful for you to read, copy, distribute, disclose or otherwise use the information in this e-mail. If you are not the intended recipient please contact us immediately. E-mail may be susceptible to data corruption, interception and unauthorised amendment, and we do not accept liability for any such corruption, interception or amendment or the consequences thereof.

3i is committed to following policies which protect your privacy and comply with current international data protection laws and regulations in respect of personal data. Further details of these policies can be found at www.3i.com.
*************************************************

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to