<div>
Hi,<br />
<br />
Please read the below discussion;<br />
<br />
<a href="http://www.velocityreviews.com/forums/t372195-asa-72-dead-connection-detection-dcd.html" rel="ugc">http://www.velocityreviews.com/forums/t372195-asa-72-dead-connection-detection-dcd.html</a>
</div>


Hi,

Please read the below discussion;

http://www.velocityreviews.com/forums/t372195-asa-72-dead-connection-detection-dcd.html [http://www.velocityreviews.com/forums/t372195-asa-72-dead-connection-detection-dcd.html]

<div>
<div class="content wysiwyg-content">
We have a Cisco ASA configure with Anyconnect clients connecting over ssl.<br />
<br />
This is all working great, clients can connect and stay connected for days.<br />
<br />
The problem we are having is that TCP sessions have an overly aggressive timeout configured.<br />
If I log into a unix server over the vpn session using ssh, the session works fine as long as I am not idle. &nbsp;If I idle the session, the ASA tears the tcp session down in around 7 minutes. &nbsp;<br />
If I have any other client/server package running that allows the session to idle for between 5 and 7 minutes, the session will die.<br />
<br />
I assume that the ASA is tearing down TCP sessions when they time out due to excessive idle time.<br />
<br />
I need to be able to turn this idle timer up to a much longer perion.<br />
<br />
What configuration lines control this behavior?
</div>
</div>


We have a Cisco ASA configure with Anyconnect clients connecting over ssl.

This is all working great, clients can connect and stay connected for days.

The problem we are having is that TCP sessions have an overly aggressive timeout configured.
If I log into a unix server over the vpn session using ssh, the session works fine as long as I am not idle.  If I idle the session, the ASA tears the tcp session down in around 7 minutes.  
If I have any other client/server package running that allows the session to idle for between 5 and 7 minutes, the session will die.

I assume that the ASA is tearing down TCP sessions when they time out due to excessive idle time.

I need to be able to turn this idle timer up to a much longer perion.

What configuration lines control this behavior?

Cisco anyconnect vpn protocol timeouts

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.