The session timer profile applies the timeout values to Tier-0 or Tier-1 router interfaces or groups containing segments. The timeout values decide how long a protocol session remains active after the session closes.

Session Timer Values

  • Default Timer Profile shown with API and UI applies only to distributed firewall (DFW).
  • Gateway Firewall (GFW) default session timers are different than the default profile timer seen when using API and UI. GFW default session timers are optimized for North-South traffic, and are lower by default.
  • FW session timers can be changed for both DFW and GFW by using the API and UI.
  • The same non-default timer profile can be applied to both DFW & GWF, if needed.
If you do not customize timer values, the gateway takes default values. Gateway firewall default timer values:
Timer Property Edge Default (secs) Minimum (secs) Maximum (secs)
ICMP Error Reply 6 10 4320000
ICMP First Packet 6 10 4320000
TCP Closed 2 10 4320000
TCP Closing 900 10 4320000
TCP Established 7200 120 4320000
TCP Fin-wait 4 10 4320000
TCP First Packet 120 10 4320000
TCP Opening 30 10 4320000
UDP First Packet 30 10 4320000
UDP Multiple 30 10 4320000
UDP Single 30 10 4320000
Distributed firewall default session timer values:
Timer Property DFW Default (secs) Minimum (secs) Maximum (secs)
ICMP Error Reply 10 10 4320000
ICMP First Packet 20 10 4320000
TCP Closed 20 10 4320000
TCP Closing 120 10 4320000
TCP Established 43200 120 4320000
TCP Fin-wait 45 10 4320000
TCP First Packet 120 10 4320000
TCP Opening 30 10 4320000
UDP First Packet 60 10 4320000
UDP Multiple 60 10 4320000
UDP Single 30 10 4320000