topic Re: Max session age? in General Topics

Max session age?

dberber1 — Wed, 28 Mar 2018 16:39:57 GMT

Quick question here. If there is a perfect TCP or UDP session that is just sending stream data for example (say, an IP camera feed to a DVR server) and there are no app hiccups or dropped packets - is there a max session age for this condition? I can't seem to find anything in the docs, and I have a few sessions that are nearing 2 weeks old, so I'm assuming the answer is that there isn't a max age on a valid, working session - just wanted to double check that I'm not missing anything.

TIA

Re: Max session age?

OtakarKlier — Wed, 28 Mar 2018 17:55:58 GMT

Hello,

While I havent found a setting for it, I dont think there is an option for this? Why would you want to interupt a session? I also have some sessions that are months old, mainly netflow. There are settings for sessions if you go to the Device Tab-> Setup -> Session. But these are mainly for hung sessions or where no data is flowing so you dont consume your firewall with sessions that are hung or stalled.

Regards,

Re: Max session age?

dberber1 — Wed, 28 Mar 2018 18:00:13 GMT

Yeah - I was just wondering if there was one. I don't think so, but thought I would ask. Bad actor could conciveably use up all sessions with valid long running sessions....

Re: Max session age?

OtakarKlier — Wed, 28 Mar 2018 18:01:35 GMT

Hello,

@dberber1, you are correct, it would be a classic DoS scenario.

Cheers!