NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] TCP Timeout issue - Need help!



Hi

You can edit the /etc/fw/lib/init.def file to manually increase the
TCP_TIMEOUT value per service

Search this file for TCP_TIMEOUT and you will see how this is done. The
changes are impleneted when you next install a policy.

Cheers
Mark


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of
William Butler
Sent: Saturday, October 20, 2001 12:01 AM
To: [email protected]
Subject: Re: [FW-1] TCP Timeout issue - Need help!


We have set the tcp timeout as high 86,400 seconds using the GUI.  Hope this
helps.

w.b.

-----Original Message-----
From: Layne Meier [mailto:[email protected]]
Sent: Friday, October 19, 2001 8:14 AM
To: [email protected]
Subject: [FW-1] TCP Timeout issue - Need help!
Importance: High


I've seen several posts to this list group (including at least one from
me a long time ago) about increasing the TCP timeout on our Firewall.

We have several government agencies trying to upload via FTP large
(sometimes over a Gig) files to us.  Here's the deal.  I've gone into
the FW GUI and increased the TCP timeout to the max 7200 seconds (2
hours).  Since we run multiple firewalls (High Availability) I decided
to check the $FWCONF/conf/objects.C file.  On my management server, the
tcptimeout property shows (7200).  I connected to the actual Firewall
itself and it only shows the tcptimeout property to be (3600) {1 hour}.

I can manually change this setting, but will I need to restart the
Firewall daemon?  Can I manually put the TCPTimeout to a higher value
(10800) {3 Hours}?

Thanks for your help in advance,

Layne Meier
Network/Internet Analyst
Atlanta Newspapers, Inc.

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.