Description
This article describes how to change session TTL for all traffic matching a firewall policy, as it is sometimes required.
Scope
FortiGate.
Solution
This change can be made by CLI:
config firewall policy
edit [rule number]
set session-ttl [seconds]
end
Example:
config firewall policy
edit 1
set session-ttl 1500
end
Note:
This configuration only affects traffic or connections that match the policy. It will override the global timeout setting if defined by using 'config system session-ttl'.
Also session-ttl-> Enter an integer value from <300> to <2764800> or (special = <0>).
Numbers defined are in seconds as mentioned above.
Related article:
Technical Tip: Customizing Session TTL in FortiOS
