[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] TCP Timeout issue - Need help!
Hi You can edit the /etc/fw/lib/init.def file to manually increase the TCP_TIMEOUT value per service Search this file for TCP_TIMEOUT and you will see how this is done. The changes are impleneted when you next install a policy. Cheers Mark -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of William Butler Sent: Saturday, October 20, 2001 12:01 AM To: [email protected] Subject: Re: [FW-1] TCP Timeout issue - Need help! We have set the tcp timeout as high 86,400 seconds using the GUI. Hope this helps. w.b. -----Original Message----- From: Layne Meier [mailto:[email protected]] Sent: Friday, October 19, 2001 8:14 AM To: [email protected] Subject: [FW-1] TCP Timeout issue - Need help! Importance: High I've seen several posts to this list group (including at least one from me a long time ago) about increasing the TCP timeout on our Firewall. We have several government agencies trying to upload via FTP large (sometimes over a Gig) files to us. Here's the deal. I've gone into the FW GUI and increased the TCP timeout to the max 7200 seconds (2 hours). Since we run multiple firewalls (High Availability) I decided to check the $FWCONF/conf/objects.C file. On my management server, the tcptimeout property shows (7200). I connected to the actual Firewall itself and it only shows the tcptimeout property to be (3600) {1 hour}. I can manually change this setting, but will I need to restart the Firewall daemon? Can I manually put the TCPTimeout to a higher value (10800) {3 Hours}? Thanks for your help in advance, Layne Meier Network/Internet Analyst Atlanta Newspapers, Inc. =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html =============================================== =============================================== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ===============================================
|