Unidirectional session refreshing for security zones

Use unidirectional session refreshing on a security zone to either refresh a session by any packet from any direction (default) or to only refresh a session by packets in the initial direction. 

This feature is disabled by default.  To enable it, use the set security zones security-zone unidirectional-session-refreshing CLI statement.