https://live.paloaltonetworks.com/t5/general-topics/linux-and-tcp-keepalive/m-p/222689#M64038 <P>Hi</P><P>&nbsp;</P><P>Is there some reason that PA have a 1 hour keepalive value, where linux has a 2 hour timeout value.</P><P>&nbsp;</P><P>Whats considered best practices ... reset the PA to 2 hours or bring down the linux keepalive value to say 1800</P><P>&nbsp;</P><P>A</P> Wed, 18 Jul 2018 07:38:55 GMT Alex_Samad 2018-07-18T07:38:55Z https://live.paloaltonetworks.com/t5/general-topics/linux-and-tcp-keepalive/m-p/222689#M64038 <P>Hi</P><P>&nbsp;</P><P>Is there some reason that PA have a 1 hour keepalive value, where linux has a 2 hour timeout value.</P><P>&nbsp;</P><P>Whats considered best practices ... reset the PA to 2 hours or bring down the linux keepalive value to say 1800</P><P>&nbsp;</P><P>A</P> Wed, 18 Jul 2018 07:38:55 GMT https://live.paloaltonetworks.com/t5/general-topics/linux-and-tcp-keepalive/m-p/222689#M64038 Alex_Samad 2018-07-18T07:38:55Z https://live.paloaltonetworks.com/t5/general-topics/linux-and-tcp-keepalive/m-p/222733#M64048 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/62286">@Alex_Samad</a>,</P><P>Are you having an issue with the firewall being set to 60 minutes for the timeout instead of 120 like on linux?&nbsp;The firewall closes things a bit earlier to keep the session count down on the firewalls, and 60 minutes was tested and verified to cause a very small amount of issues.&nbsp;</P><P>I'm guessing that this would be more of an internal application issue; and if it is I would recommend making a custom app-id with a higher timeout value.&nbsp;</P> Wed, 18 Jul 2018 12:28:33 GMT https://live.paloaltonetworks.com/t5/general-topics/linux-and-tcp-keepalive/m-p/222733#M64048 BPry 2018-07-18T12:28:33Z