TCP Timeout for Sessions inside SSL VPN

All the articles I can find on F5 timeouts relate to the TCP profile of the VIP. In this case, in APM, the VIP is used for the connection, and then the session is passed to an access policy and the SSL VPN is established.

 

The VIP itself doesn't have a timeout issue, but any tcp session created within the VPN tunnel has the 300 second idle timeout limit enforced.

 

I can see the sessions in

 

tmsh show sys conn ss-client-addr [session-ip]

 

Once the timer hits 300 seconds for any tcp session created by the VPN user, the F5 issues an RST to the VPN client which kills the session.

 

Changing the tcp profile of the VIP doesn't alter this timeout. Where is the tcp profile for the sessions inside the tunnel?