@deostroll the question is imo, why you have an idle policy in the firewall, and not for the applicaton side. thus if an user is idle the application cut, not the connection in the backbone. it's like turning off a car by letting run out of gaz