Forum Discussion

Ed_Summers's avatar
Ed_Summers
Icon for Nimbostratus rankNimbostratus
Sep 15, 2016

Config option for default SNAT translation idle timeout?

SNAT translation addresses by default have an 'indefinite' timeout for TCP, UDP, and IP. This can be set on a per-object basis when the new translation address is configured.

 

Is it possible to configure a 'global' value to apply to any new SNAT translation? I.e.: Set the TCP idle timeout to xxx seconds for new SNAT translation unless explicitly set otherwise?

 

I checked through some locations (global settings, DB variables) and didn't see anything that appeared to allow this.

 

2 Replies

  • I second this request. The default value causes connection leaks which can eventually lead to an LTM failure. At least allow users/customers the ability to set reasonable defaults.