Proxy inspector drop reset

Richard Dumag — Tue, 12 Mar 2019 00:39:25 GMT

Outside users with certain public ip addresses are not able to access our website. Below is a log from our ASA 5550 8.2(5) on one of the clients that's being dropped. Packet trace result shows that the outside public addresses are allowed.

We do have a TAC case open but wanted to also check the forum if anyone had ran in to this issue before. Any comment is appreciated.

4 Dec 19 2012 15:40:15 507003 xxx.xxx.x.2 23348 xxx.xxx.88.1 80 tcp flow from outside:xxx.xxx.xxx.2/23348 to DMZ:xxx.xxx.xx.1/80 terminated by inspection engine, reason - proxy inspector drop reset.

Re: Proxy inspector drop reset

Kureli Sankar — Sun, 13 Jan 2013 19:17:52 GMT

This looks like port 80 traffic. Do you have http inspection enabled? If so, you can try to remove http inspection and see if the client is able to load the website hosted behind the ASA.

conf t

policy-map global_policy

class inspection_default

no inspect http

-Kureli

https://supportforums.cisco.com/community/netpro/expert-corner#view=webcasts

Upcoming Live Webcast in English: January 15, 2013
Troubleshooting ASA and Firewall Service Modules

Register today: http://tools.cisco.com/squish/42F25

topic Re: Proxy inspector drop reset in Network Security

Proxy inspector drop reset

Re: Proxy inspector drop reset