topic Re:Problem 106001 Asa5510 in Network Security

Problem 106001 Asa5510

branas — Mon, 11 Mar 2019 23:58:18 GMT

Hello all,

I have some problems on my network (invisible printers, unable to access to the server for a short time...) so i decided to look to the log entries on my Asa 5510.

Surprise since my problems started i receive this type of message (severity = 2 Critical) :

106001 Inbound TCP connection denied from 10.65.10.X/56478 to 10.65.10.30/139 flags PSH ACK on interface inside

106001 Inbound TCP connection denied from 10.65.10.X/56478 to 10.65.10.30/139 flags ACK on interface inside

106001 Inbound TCP connection denied from 10.65.10.X/56483 to 10.65.10.30/139 flags SYN on interface inside

106006 Deny inbound UDP from 10.65.10.254/137 to 10.65.10.30/137 on interface inside

The only ACL on this interface is Any to any IP+DNS+ICMP = permit and the implicit any to any ip = deny

Does that look weird to you? Is there something to do to correct these problems?

Many Thanks,

P.S. : 10.65.10.30 is my server. 10.65.10.X = any IP adress on the network. 10.65.10.254 is one of the printer

Re:Problem 106001 Asa5510

frederic_hohn — Tue, 25 Sep 2012 04:58:59 GMT

The IP's are on the same subnet?!

So the question is why the asa can see the traffic.

Do you have Proxy arp enabled on inside Interface? If yes Check your Nat statements

Sent from Cisco Technical Support Android App

Re:Problem 106001 Asa5510

branas — Tue, 25 Sep 2012 07:22:12 GMT

Impresive !

I disabled proxy arp (don't even know why he was there...) and everything worked fine. No more messages in logs and now every connection with printer work perfectly.

Thank you very much Frederic !