08-21-2010 06:40 AM
What is the simplest way to change the default NAT translation timeout for UDP?
I would like to set it to something longer (say 300 seconds) than the default 60 seconds.
I'm doing Source NAT on an SRX100 running 10.0R1.8.
Solved! Go to Solution.
08-22-2010 09:23 AM
I think this should help:
user@host# set applications application udp300s protocol udp destination-port 1-65535 inactivity-timeout 300
And then match on newly created application udp300s in your policies.
Also, if you have UDP ALGs enabled like SIP ALG, it has more than 1 timeout: