How is Idle Timeout handed for DTLS and TLS for the session?
A. When a DTLS-Tunnel is active, that is the only tunnel where idle timeout matters. Because very little control channel traffic passes over the SSL-Tunnel, it is almost always idle so it is exempt while there is an active DTLS-Tunnel. If something happened to UDP and the DTLS-Tunnel was torn down, then idle timeout would apply to the SSL-Tunnel. Unfortunately with most Windows PCs, they are never truly “idle” so many people think idle timeout is not working. There has been discussion about making a “data threshold” value for idle timeout, but even that could be tricky. In order to make a Windows PC truly idle, you have to remove Microsoft Networking and File and Print Sharing from the Network Config for the PC’s physical interface.
