Even if I define the TCP Session Timeout of a protocol to be something like 2 hours, crossbeam always reports the maximum is 10 minutes (TTL). After these 10 min., the connections get dropped, although they are listed in the checkpoint's connection table (with the correct timeout).
Code:
CBS# sh flow active source-address 10.10.0.1 destination-address 10.10.0.194
This command may take a few minutes. Do you want to continue? <Y or N> [Y]:
Module Source Destination Protocol Domain TTL
np1 10.10.0.1: 5886 10.10.0.194: 3927 6 1 0m 15s
Rx Modules fw_2
Ageout 4, Skip Ports, Skip Protocol
Is this the correct behavior? Is there any way to override this TTL (Time To Live?) to be the same as it is defined in Smart Dashboard?
Thanks