Issue with dropped packets

kostasthedelegate — Mon, 05 Jul 2021 08:19:32 GMT

Hello

I have an issue with ASA FW that is used for VPN purposes.

I see a lot of dropped packets in two interfaces.

The reason is

ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched)

The source is a VIP of some servers and the dest are some vpn clients.

In the logs of ASA I see the following

4|||313004|||||Denied ICMP type=0, from laddr <VIP> on interface <name> to <VPN Client>: no matching session

I have seen some bugs about the inspection

CSCvb92417 but the version is too old

Any ideas?

Thanks and regards,

Konstantinos

Re: Issue with dropped packets

MHM Cisco World — Mon, 05 Jul 2021 12:46:13 GMT

VPN client is RAVPN or S2S ?

kostasthedelegate — Mon, 05 Jul 2021 13:56:33 GMT

RA VPN