Order of Processing Timeout Values

Order of Processing Timeout Values

42254
Created On 09/25/18 19:26 PM - Last Modified 06/03/23 03:53 AM


Resolution


Definitions:

  • Session timeout: Period of  time (seconds) required for the application to time out due to inactivity.
  • TCP Timeout (seconds): Timeout for terminating a TCP  application flow (1-604800 seconds).
  • UDP Timeout (seconds): Timeout for terminating a UDP  application flow (1-604800 seconds).

 

There are application-specific timeout values defined in App Content and updates and system default timeout values based on protocol.

 

Application-specific values will take precedence if present as follows:

  • For TCP, app-specific TCP timeout > app-specific timeout > TCP default timeout
    • CLI command to adjust the TCP default value: >set session timeout-tcp
  • For UDP, app-specific UDP timeout > app-specific timeout > UDP default timeout
    • CLI command to adjust the UDP default value: >set session timeout-udp
  • For ICMP, app-specific timeout > ICMP default timeout (timeout-icmp in CLI)
    • CLI command to adjust the ICMP default value: >set session timeout-icmp
  • For all other IP protocols, app-specific timeout > other-IP default timeout
    • CLI command to adjust the app-specific value: >set session timeout-default

 

Default Timeout Values: a

Session timeout

  • TCP default timeout: 3600 seconds
  • TCP session timeout before 3-way handshaking: 5  seconds
  • TCP session timeout after FIN/RST: 30  seconds
  • UDP default timeout: 30 seconds
  • ICMP default timeout: 6 seconds
  • other IP default timeout: 30 seconds

 

Session timeout in discard state:

  • TCP: 90 seconds
  • UDP: 60 seconds
  • other IP protocols: 60 seconds

 

owner: swhyte



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClYiCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language