topic Re: Problem with TCP Connection in Network Security

Problem with TCP Connection

Jewgeni Uschegow — Fri, 21 Feb 2020 14:55:51 GMT

hi everyone,
I have ACL on the ASA that allow TCP connection between two networks. It works well, but sometimes ASA block this rule and I have to off und on this rule. Done it works again. I think it is because the TCP Stack between hosts in the networks is bad.
What can I do to ASA doesn't block the rule.

Best regards

Re: Problem with TCP Connection

Karsten Iwen — Sun, 10 Dec 2017 23:03:00 GMT

There are three options available:

If it is really based on a bad TCP-stack of the endpoints, update them to a recent version or replace them.
The ASA could have a bug that causes the traffic to be dropped. I recently had that with Citrix-traffic and an ASA update solved the problem.
You could configure TCP-state-bypass to disable checks in the ASA.