Iseries WS session keeps disconnecting after periods of inactivity

We have recently experienced constant disconnects on users' WS sessions.  All PC users have a WS session file to connect to our AS/400.  We have recently installed a ServGate M30 sercuity device/firewall.  Aftewards, sessions constantly disconnect after periods of inactivity.  All PCs are running XP pro, SP 2.  All users are connected to our internal network.  There are 2 users connected to our DMZ that do not experience this problem.

My troubleshooting has included the following:
1. A constant ping to the IP of the AS/400 shows no communication loss.
2. I created a KeepAliveTime DWORD in the registry (LocalMachine\CurrentControlSet\Services\TcpIp\Parameters\ and set it to 3600000 seconds (decimal)
3. I created a startup script at login - CWBCOPWR /KA:1 /MKA:60,3600

I have looked navigated through the ServGate device and do not see anything that would cause the disconnect because of inactivity.  

Any help or suggestions is much appreciated.
ConexionDaveAsked:
Who is Participating?
Advertise Here
 
giltjrConnect With a Mentor Commented:
Do you have the ability to do a packet capture in-front of the firewal and behind the firewall?

If so I would suggest that you capture the packets to verify what is going on.  

I am assuming that you can predict how long after the session starts and there is no activity that it will end.  If so, then I would suggest capturing two traces on each side.  Trace 1 is the session setup to make sure that the session/connection is starting correctly.  Trace two you would start just prior to when you think the connection is going to drop and capture the drop.

I just thought of something, some stateful firewalls have a timer value on how long they will keep track of a conneciton.  I may be that your session is lasting longer than this and the firewall is deleting the information it has for the connection.

Also you have the keepalive timer set to  3600000 in the registry which is in ms, in seconds this is 3600, or 1 hour.  Do you really want to send the keepalive packet ever hour?
0
 
Dave FordSoftware Developer / Database AdministratorCommented:
You might have more success by posting your question in the AS/400 topic area:

http://www.experts-exchange.com/Programming/Programming_Platforms/AS400/

-- DaveSlash
0
 
giltjrCommented:
I would check to see if the ServGate is actually passing the keepalive packets.

I would also check DB2 log on the iSeries server to see if it is showing anything.

Prior to using the ServGate, what were you using as a firewall?
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Access It Instantly
 
ConexionDaveAuthor Commented:
Prior to the ServGate, we were using a DLINK firewall, and also had a Symantec Security device.
0
 
ConexionDaveAuthor Commented:
I've changed the regestiry to send keep alives every minute if there is inactity for a 5 minute period.  Unfortuantely, I can't predict when the session will disconnect.  Seemingly, it varies.  
0
 
ConexionDaveAuthor Commented:
I did find a timer value on our firewall.  It was set to 15 minutes.  Changing the value to 60 did the trick.   thanks giltjr.
0
 
giltjrCommented:
Glad to be of help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.