This object sets the number of seconds an idle TCP connection is tracked before its NAT binding is removed, defaulting to 300 seconds with a maximum of one week (604800 seconds); a value of zero causes near-immediate timeout. An admin tunes this to balance keeping long-lived TCP sessions translated correctly against reclaiming NAT table resources promptly. For example, lowering this from the 300-second default would free up NAT bindings faster on a device with many short-lived TCP connections and limited binding table capacity.