How To: Extend Connection Timeout to Upstream

Goal: Extend the default timeout configuration from the default 60 seconds for assets that need a longer timeout connection time.

Overview:

In CloudGuard WAF as a Service, the default connection timeout for both NGINX and CloudFront is set to 60 seconds. To extend the timeout for specific assets, adjust the settings in the asset's advanced options.

Adjusting the NGINX timeout configuration will automatically update CloudFront's settings

What To Do?

To configure the extended timeout for a specific asset, follow these steps:

1. Log in to the Infinity Portal.

2. Open the WAF application from the application menu.

3. Navigate to the Assets page under the Policy tab.

4. Select the desired asset.

5. Click on Advanced... proxy field to access the extended timeout configuration.

6. Click on Advanced Settings.

7. Add the following fields with the desired timeout configuration needed:

Key	Value
Read Timeout	Numeric Number (up to 180)
Proxy Send Timeout	Numeric Number (up to 180)
Keep Alive Timeout	Numeric Number (up to 180)

1. Click OK

2. Click Enforce.

Extended Timeout configuration is supported up to 180 seconds. For longer timeouts, please contact Check Point Support.