Forum Discussion
L4L7_53191
Jan 27, 2010Nimbostratus
I'm not sure how to do this in a rule. It's real easy to setup a port 22 virtual server though, and I'd suggest going that route - it's cleaner, to me at least. It sounds like you've got a forwarder set up that handles multiple protocols. If this is the case, you can carve out that SSH traffic by adding a 0.0.0.0:22 virtual and applying the custom tcp timeout behavior to that virtual.
-Matt