Timeout of the IP NAT Table

Question

Hello, 
 We are suspecting a problem of saturation with the NAT Table (masquerading). 
 To solve similar problem (the 65k entries of the table are filled in less than 15 minutes), we just reduced the Timeout of the NAT Table to 5 minutes (on a Cisco router). 
 
 How can I set this parameter in a Sophos SG ? 
 And, where can I display this NAT Table (I could not find it) ? 
 
 Thanks in advance for your help.

BAlfson · Accepted Answer

Salut, 
 You can see the timeouts with the following: 
 # cc get packetfilter timeouts 
 Change a setting, for example: 
 # cc set packetfilter timeouts ip_conntrack_generic_timeout 300 
 A list of active connections is at /proc/net/ip_conntrack . 
 Cheers - Bob