None of that should be necessary. Increase your udp timeout to at least 600 seconds and make sure outgoing udp is allowed and keeps state.