Screen OS

We can traceroute and ping a website. However, when we attempt https we receive "Closed-Age Out" response and noticed that it's always about 20 seconds when the attempted connection times out.  Upon investigation, I learned that the initial TCP timeout is 20 seconds during the 3-way handshake.  Does anyone know if there's a command to increase this timeout value in ScreenOS?  We'd like to increase the timeout as a test.

------------------------------
WALTER BERRIDGE
------------------------------

The timeouts are at the service port level and can be individually changed.

https://supportportal.juniper.net/s/article/ScreenOS-How-to-change-a-service-timeout

------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home
------------------------------

Original Message:
Sent: 10-05-2022 11:48
From: WALTER BERRIDGE
Subject: Change Initial TCP Timeout

We can traceroute and ping a website. However, when we attempt https we receive "Closed-Age Out" response and noticed that it's always about 20 seconds when the attempted connection times out.  Upon investigation, I learned that the initial TCP timeout is 20 seconds during the 3-way handshake.  Does anyone know if there's a command to increase this timeout value in ScreenOS?  We'd like to increase the timeout as a test.

------------------------------
WALTER BERRIDGE
------------------------------