Skip to main content
btey
Staff & Editor
Staff & Editor
March 21, 2025

Troubleshooting Tip: Change session TTL for Hyperscale VDOM firewall

Description

This article describes the system warning when changing session-TTL for the Hyperscale firewall. The following warning appears when configuring the session-ttl:

 

config system session-ttl
    config port
       edit 53
          set protocol 17
          set timeout 30
          set start-port 53
          set end-port 53
       next
    end
end

"Warning: TTL(xx) sent to NPU is limited to 120 seconds, software TTL is unchanged."

Scope FortiGate, Hyperscale VDOM.
Solution

The minimum TTL for UDP traffic is set at 120 seconds for Hyperscale VDOM. Session setup by software will follow the configuration but session setup by hardware will remain as 120 seconds.

 

In v7.6.1 or later, this restriction has been removed and allowed to set any smaller value (Greater than or equal to 1) for UDP traffic.

 

Related documents:

Technical Tip: Session timeout settings

New features or enhancements

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT