- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Change TCP or UDP inactivity timeout in Gen 7 Policy mode
05/31/2022 
2 People found this article helpful
16,619 Views
Description
On certain occasions, you may need to increase the TCP or UDP timeout for a specific connection.
EXAMPLE: If VoIP connections timeout after 3600 seconds we would adjust the firewall rule for VoIP traffic and change the UDP timeout value to 3600 seconds.
By default, the TCP connection timeout is 15 minutes, and the UDP connection timeout is 30 seconds. In order to increase the connection timeout, in Gen 7 Policy mode we can modify it from the Security Action Profile created for the Security Policy.
Resolution
Login to the firewall management UI.
To create Security Action Profile:
1) Navigate to Object | Action Profiles | Security Action Profile
2) Click 'Add' to create a new Security Action Profile
3) Under the 'Miscellaneous' Tab, Change the TCP or UDP Connection Inactivity Timeout value and Save the changes
To create a Security Policy:
1) Navigate to Policy | Rules and Policies | Security Policy
2) Click 'Add' to create a rule to allow the VoIP Traffic
3) Select the created Security Rule Action created with the increased inactivity timeout and Save the changes.
Related Articles
- Firewall is not generating syslog packets
- Configuring SNMP in SonicOS
- Why is SonicWall blocking access to websites?
YES
NO