State Caching (cont)

• State entries have timeouts

• ICMP: default 60 seconds

• UDP: default 120 seconds

• TCP: depends on the state the connection is in and varies between 2*MSL and 5 days

• All timeouts are tunable

Notes: