https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-session-timeout-question/m-p/228967#M44115 <P>Sorry I have another newbie question.&nbsp; In TCP Services, you have the ability to click Advanced and change the session timeout from the default value (3600 seconds - 1 hour).</P><P>My question is, is this timeout only a factor for IDLE connections?&nbsp; i.e. if a TCP session is actively passing traffic, sending and receiving keep-alive packets, etc.. then the session will NOT time out?</P><P>Just trying to sanity check some "First packet isn't SYN" drops.&nbsp; I can filter by source port (s_port:xxxx) and see that the session was established with an Accept, and then exactly 1 hour later, I see the "First Packet isn't Syn" drop which to me may mean the app is using long-lived sessions without keepalives... OR it might mean the app is configured to send a keepalive every 60 minutes and is just barely not making the cutoff?&nbsp;</P> Fri, 04 Oct 2024 21:45:58 GMT Cypress 2024-10-04T21:45:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-session-timeout-question/m-p/228967#M44115 <P>Sorry I have another newbie question.&nbsp; In TCP Services, you have the ability to click Advanced and change the session timeout from the default value (3600 seconds - 1 hour).</P><P>My question is, is this timeout only a factor for IDLE connections?&nbsp; i.e. if a TCP session is actively passing traffic, sending and receiving keep-alive packets, etc.. then the session will NOT time out?</P><P>Just trying to sanity check some "First packet isn't SYN" drops.&nbsp; I can filter by source port (s_port:xxxx) and see that the session was established with an Accept, and then exactly 1 hour later, I see the "First Packet isn't Syn" drop which to me may mean the app is using long-lived sessions without keepalives... OR it might mean the app is configured to send a keepalive every 60 minutes and is just barely not making the cutoff?&nbsp;</P> Fri, 04 Oct 2024 21:45:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-session-timeout-question/m-p/228967#M44115 Cypress 2024-10-04T21:45:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-session-timeout-question/m-p/228975#M44117 <P>It's an idle timer, yes.</P> Fri, 04 Oct 2024 22:52:29 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-session-timeout-question/m-p/228975#M44117 PhoneBoy 2024-10-04T22:52:29Z