https://community.cisco.com/t5/network-security/firewall-asp-drops/m-p/3956831#M132423 <P>I was wondering if it is normal to have millions of drops for the below asp drop. I have a situation where an internet firewall has 34 million over 5 days. I have multiple other firewalls that have a lot less traffic on them and they do have millions of drops over significantly longer periods of time. Is there anything I should look at? One comment would be that the traffic looks like legitimate return traffic from public web servers.</P><P>&nbsp;</P><P><FONT>Connection to PAT address without pre-existing xlate (nat-no-xlate-to-pat-pool)</FONT></P><P>&nbsp;</P><P>&nbsp;</P> Mon, 11 Nov 2019 20:53:23 GMT Alex Pfeil 2019-11-11T20:53:23Z https://community.cisco.com/t5/network-security/firewall-asp-drops/m-p/3956831#M132423 <P>I was wondering if it is normal to have millions of drops for the below asp drop. I have a situation where an internet firewall has 34 million over 5 days. I have multiple other firewalls that have a lot less traffic on them and they do have millions of drops over significantly longer periods of time. Is there anything I should look at? One comment would be that the traffic looks like legitimate return traffic from public web servers.</P><P>&nbsp;</P><P><FONT>Connection to PAT address without pre-existing xlate (nat-no-xlate-to-pat-pool)</FONT></P><P>&nbsp;</P><P>&nbsp;</P> Mon, 11 Nov 2019 20:53:23 GMT https://community.cisco.com/t5/network-security/firewall-asp-drops/m-p/3956831#M132423 Alex Pfeil 2019-11-11T20:53:23Z https://community.cisco.com/t5/network-security/firewall-asp-drops/m-p/3987509#M132424 <P>It looks like seeing these drops are normal traffic on the network. I have not been able to find any additional information other than that I have multiple firewalls and there are a lot of drops for nat-no-xlate-to-pat-pool.</P> Thu, 21 Nov 2019 21:09:27 GMT https://community.cisco.com/t5/network-security/firewall-asp-drops/m-p/3987509#M132424 Alex Pfeil 2019-11-21T21:09:27Z