Refer to the exhibit, which shows the partial output of a diagnose command.

FortiGate will drop the expected traffic if it does not arrive within 23 seconds.

Clearing the master session has no impact on the expectation session.

This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.

The session is checked against firewall policy ID 25.