Filter
Top Products
22-12
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 22 Configuring Connection Settings
Feature History for Connection Settings
Configurable timeout for PAT xlate 8.4(3) When a PAT xlate times out (by default after 30 seconds),
and the ASA reuses the port for a new translation, some
upstream routers might reject the new connection because
the previous connection might still be open on the upstream
device. The PAT xlate timeout is now configurable, to a
value between 30 seconds and 5 minutes.
We modified the following screen: Configuration > Firewall
> Advanced > Global Timeouts.
This feature is not available in 8.5(1) or 8.6(1).
Increased maximum connection limits for
service policy rules
9.0(1) The maximum number of connections for service policy
rules was increased from 65535 to 2000000.
We modified the following screen: Configuration > Firewall
> Service Policy Rules > Connection Settings.
Decreased the half-closed timeout minimum
value to 30 seconds
9.1(2) The half-closed timeout minimum value for both the global
timeout and connection timeout was lowered from 5
minutes to 30 seconds to provide better DoS protection.
We modified the following screens:
Configuration > Firewall > Service Policy Rules >
Connection Settings
Configuration > Firewall > Advanced > Global Timeouts.
Table 22-1 Feature History for Connection Settings (continued)
Feature Name
Platform
Releases Feature Information