Is it possible to configure PA to send a reset(rst) packet when a session timeout occurs?

[SoongNyeongKim]

Hello.

I'm running a PA-1420 device.
The PAN-OS version is 11.0.3-h12.

Is it possible to configure the PA to send RST packets to both sides when a TCP session times out due to aged-out?
I read in a previous post that this wasn't possible on the PA, but I'm wondering if this is still the case.
(https://live.paloaltonetworks.com/t5/general-topics/pa-sends-a-reset-rst-when-tcp-session-is-timeout...)

Thank you.

[BPry]

@SoongNyeongKim,

As far as I'm aware, this is still not possible upon session timeout. PAN simply closes the session for aged-out traffic and that can't be modified from a behavior standpoint. 

[kiwi]

Hi @SoongNyeongKim ,

That being said, because this was brought up before I think it's would be a good candidate for a feature request.

For new features or product enhancements, the most effective way is to go through your dedicated Palo Alto Networks account team.

• Contact Your Sales Engineer (SE): Your SE is the primary point of contact for submitting feature requests. They have direct access to the product management team and can formally submit your request into the internal system.

• Provide Details: When you contact your SE, be prepared to provide a detailed use case. Explain why the feature is important and the business problem it would solve. This helps the product team understand the value and prioritize the request.

• Voting on Existing Requests: If a similar feature has already been requested, your SE can add a "vote" on your behalf. This is crucial because the number of votes a feature receives from customers directly influences its priority and can expedite its development.

This process ensures your feedback is formally tracked and considered by the company's product development team. 
You can also ask users here to add their vote to it once you get a FR#.

Kind regards,

-Kim.