Welcome to ISAserver.org

SSH session times out

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> SSH session times out

Page: [1]

Message

<< Older Topic Newer Topic >>

SSH session times out - 28.Jun.2004 9:44:00 PM

pr0nd3xtr

Posts: 20
Joined: 6.Feb.2004
From: Thousand Oaks, CA
Status: offline

Trying to figure out why ssh sessions to a linux box keep timing out with inactivity. When it comes time to implement this I dont want remote users to have session timeouts. I have allowed access to all ports from the client machine.

Has anyone else seen a problem with this?

Thanks,

MB

Post #: 1

Featured Links*

RE: SSH session times out - 28.Jun.2004 10:02:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Matt,

I have never experienced problems with idle connections on ISA server. How did you determine that it is the ISA server who drops the connection? Did you take a NetMon trace to verify that?

HTH,
Stefaan

[ June 28, 2004, 10:03 PM: Message edited by: spouseele ]

(in reply to pr0nd3xtr)

Post #: 2

RE: SSH session times out - 29.Jun.2004 1:00:00 AM

pr0nd3xtr

Posts: 20
Joined: 6.Feb.2004
From: Thousand Oaks, CA
Status: offline

The only real determination I have is that I just moved this machine inside the test network, and I have never experienced timeouts before.

(in reply to pr0nd3xtr)

Post #: 3

RE: SSH session times out - 29.Jun.2004 1:51:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

Is this with an ISA 2004 firewall?

Thanks!
Tom

(in reply to pr0nd3xtr)

Post #: 4

RE: SSH session times out - 29.Jun.2004 9:00:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Tom,

oh... I didn't saw it was in a ISA 2004 forum! [Eek!]

Thanks,
Stefaan

(in reply to pr0nd3xtr)

Post #: 5

RE: SSH session times out - 30.Jun.2004 6:53:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Stefaan,

No problem!

Thanks! [Cool]

Tom

(in reply to pr0nd3xtr)

Post #: 6

RE: SSH session times out - 30.Jun.2004 9:29:00 PM

pr0nd3xtr

Posts: 20
Joined: 6.Feb.2004
From: Thousand Oaks, CA
Status: offline

Yes, beta 2 ISA 2004.

(in reply to pr0nd3xtr)

Post #: 7

RE: SSH session times out - 2.Jul.2004 4:19:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

The TCP timeouts are about 24 hours, I believe. So the ISA firewall isn't timing out the sessions. Do you have packet traces showing the ISA firewall sent a FIN or RST?

Thanks!
Tom

(in reply to pr0nd3xtr)

Post #: 8

RE: SSH session times out - 7.Jul.2004 5:11:00 AM

pr0nd3xtr

Posts: 20
Joined: 6.Feb.2004
From: Thousand Oaks, CA
Status: offline

I dont see any FIN or RST packets, the session just ends.

(in reply to pr0nd3xtr)

Post #: 9

RE: SSH session times out - 7.Jul.2004 2:49:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Matt,

Do you have an SSH server that I can test with? I'll see if I can repro the issue.

Thanks!
Tom

(in reply to pr0nd3xtr)

Post #: 10

RE: SSH session times out - 11.May2006 4:01:17 AM

borisfox

Posts: 3
Joined: 5.May2006
From: Khabarovsk, Russia
Status: offline

Hi Tom,

You wrote:
> The TCP timeouts are about 24 hours, I believe.

Could you please tell is it possible to increase this interval somehow ?
I experience problem which is very probably caused by this timeout: all outbound telnet and ssh sessions regularly terminates after 24 hours since establishment (+/- a few minutes) with error code 0x80074e25 (FWX_E_TIMEOUT).
Workstations from where these sessions originates use ISA Firewall Client.

Thanks,
Boris

(in reply to tshinder)

Post #: 11