On a firewall, a created session entry needs to be matched by packets constantly. If no packet matches the entry for a long time, the connection between the com...