Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 15399 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site to Site IPSEC VPN Timeout

kautilya
Hello,

I am new to IPSEC VPN.

In my scenario there is IPSEC Site to site VPN.

Only End B side users access Servers located at Site A.

At End B,There is time out issue with application.

How can i increase that idle timeout with Sophos 9.107-33

IKE SA Lifetime > 7800
IPSEC SA Lifetime > 3600

Pls help to resolve this.


This thread was automatically locked due to age.
Parents
  • 0
    As long as you have a paid license, I highly suggest that you contact support for this issue.  There is a way of adjusting from the backend, but if you do it yourself (without support blessing) and something goes wrong, you lose support and warranty until you do a re-install to remove the changes completely.  If this one application is timing out but the tunnel is still active and passing traffic, then adjusting timeouts/lifetimes for the tunnel may not be the solution.  We'd really need to know more specifics.

    Also, given the large number of issues you've been experiencing this month, you want to get your reseller involved in providing you some assistance.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    As long as you have a paid license, I highly suggest that you contact support for this issue.  There is a way of adjusting from the backend, but if you do it yourself (without support blessing) and something goes wrong, you lose support and warranty until you do a re-install to remove the changes completely.  If this one application is timing out but the tunnel is still active and passing traffic, then adjusting timeouts/lifetimes for the tunnel may not be the solution.  We'd really need to know more specifics.

    Also, given the large number of issues you've been experiencing this month, you want to get your reseller involved in providing you some assistance.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
No Data
Unfiltered HTML