The configuration diagrams below show an idle timeout session for the firewalls of 30 minutes. Idle timeout sessions that exceed the direct push timeout will ensure that firewalls do not close the session.
Low idle timeout sessions force a device to reconnect several times, consuming additional battery power. The longer the connection can remain idle, the less often the device will have to wake up and retransmit, and the longer the battery life will be.
Firewall Configuration for Best Direct Push Performance
Firewall Configuration Using a Demilitarized Zone