Default application timeout values

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Default application timeout values

Not applicable

Is there a document that shows what the default application specific timeout values are?

6 REPLIES 6

L4 Transporter

On the PA on the Gui if you go to Objects and then applications and then click on any of the application it will show the timeout values.

Thanks,

Syed R Hasnain

L4 Transporter

Hello,

In the below screenshot as explained by shasnain we can select any application in specific and look for the timeouts. If needed we can modify right there by Customizing it.

Hope this helps.

timeouts.PNG.png

L5 Sessionator

The default session timeout values can be seen by running the command from CLI

show session info

Session timeout

  TCP default timeout:                           3600 secs

  TCP session timeout before SYN-ACK received:      5 secs

  TCP session timeout before 3-way handshaking:    10 secs

  TCP session timeout after FIN/RST:               30 secs

  UDP default timeout:                             30 secs

  ICMP default timeout:                             6 secs

  other IP default timeout:                        30 secs

  Captive Portal session timeout:                  30 secs

  Session timeout in discard state:

    TCP: 90 secs, UDP: 60 secs, other IP protocols: 60 secs

--------------------------------------------------------------------------------

Session accelerated aging:                       True

  Accelerated aging threshold:                   80% of utilization

  Scaling factor:                                2 X

--------------------------------------------------------------------------------

However there is no existing doc that i am aware of which will show the session timeout value for each application. As explained above you and look at each application to find their individual timeout values.


Thanks

Numan

Not applicable

I was aware on how to check the applications and the system timeouts, but thanks for the try.

I was just wondering if Palo or anyone has taken the time to create a spreadsheet with the default application timeouts.  I wanted to distribute to our application development teams so they could identify network settings as the build their applications.

Guess this isn't around quite yet, maybe if I get some time I will try to create it and post it.

L3 Networker

You can check with SE if he is able to get default timeout information.

FYI - if you need application timeout changed only for certain traffic and not all the traffic then,

1. create a custom app with higher timeout value.

2. Setup application override policy

https://live.paloaltonetworks.com/docs/DOC-1071

3. Create a security rule to allow new custom application.

This way you have control timeout for interesting traffic only.

L5 Sessionator

You can get this list using API. Generate an API key for the session:

https://<ip_address>/api/?type=keygen&user=<username>&password=<password>


and use it in the syntax below:

  https://<ip_address>/api/?type=config&key=<obtained_from_above>&action=get&xpath=/config/predefined/application

  • 4285 Views
  • 6 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!