ASA5510 %ASA-2-106001 connection denied

BOGIFITTAC — Tue, 12 Mar 2019 05:43:19 GMT

Hi,

I am having issues for one service to connect to a monitor on the inside of my ASA firewall. I am getting %ASA-2-106001 as the log error and there is a inbound TCP connection denied from 172.X.X.X (source behind firewall) to the monitor at my HQ side on the inside interface.

I have the following NAT allowed:

global (outside) 1 interface
nat (inside) 0 access-list vpn
nat (inside) 1 0.0.0.0 0.0.0.0

I do not have an ACL going inside. The basic connection is as follows:

[Monitor] ---- [Main Core Switch] ------ [Router to COLO] ----- [ASA5510] --- Off inside interface device.

Regular traffic is able to pass through, but on port 2300 I am seeing the block.

Thank you,

Hi,I think this might be

Vibhor Amrodia — Tue, 31 Mar 2015 06:57:49 GMT

Hi,

I think this might be generaic detail for isolating this issue. I would request you to post the relevant configuration and run a packet trace on the ASA device for the traffic direction which is not working and see what action is seen in the output.

Refer:-

https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer

Thanks and Regards,

Vibhor Amrodia

topic ASA5510 %ASA-2-106001 connection denied in Network Security

ASA5510 %ASA-2-106001 connection denied

Hi,I think this might be