Check your TCP session timeout in the Stateful Inspection part of global properties. If it says 600 seconds then it's happening exactly as it's set up to: the session is idle for 10 minutes so FW1 closes the connection. If you need it longer then you can set the global property to be higher.
I'd bet that the timeouts do not apply to connections originating from the enforcement point, so when you telnet from your nokia box it stays up. -GP -----Original Message----- From: Can2002 [mailto:[EMAIL PROTECTED] Sent: 18 February 2004 14:44 To: [EMAIL PROTECTED] Subject: [FW-1] Idle Telnet sessions being dropped by FW1 I'm having a problem where connections to a Telnet server on a DMZ port appear to be dropped by FW-1 after an idle time of 10 minutes. If I connect to the telnet server from a box on the same subnet, the telnet session remains open for greater than 10 minutes, but as soon as I connect from a subnet behind the firewall I see the 10 minute timeout. I happen to have a Packetshaper connected to the external interface of the firewall, so I tried connecting to it via telnet to see if it would drop after 10 idle minutes; it did! I logged onto the Nokia command line and tried telnetting to the Packetshaper, and the session remained after 10 idle minutes. For background, the FW is on NG_R55; however it was upgraded (using upgrade_export/import) from 4.1. Thanks in advance for any help! Chris ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Vodafone Global Content Services Limited Registered Office: Vodafone House, The Connection, Newbury, Berkshire RG14 2FN Registered in England No. 4064873 This e-mail is for the addressee(s) only. If you are not an addressee, you must not distribute, disclose, copy, use or rely on this e-mail or its contents, and you must immediately notify the sender and delete this e-mail and all copies from your system. Any unauthorised use may be unlawful. The information contained in this e-mail is confidential and may also be legally privileged. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
