topic ASA drops multicast stream packets in Network Security https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933396#M458617 <HTML><HEAD></HEAD><BODY><P>That did it!! </P><P>I really appreciate your help. </P><P>Thanks</P></BODY></HTML> Fri, 09 Mar 2012 11:59:14 GMT nmogense 2012-03-09T11:59:14Z ASA drops multicast stream packets https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933393#M458614 <P>Hi,</P><P></P><P>We set up multicast routing as advised in configuration guides.</P><P></P><P>The details:</P><P>- We use ASA 8.4(1) , enabled multicast-routing </P><P>- source is on the outside interface</P><P>- receivers are far away in the network core on the inside interface</P><P>- we use pim sparse mode</P><P>- used static rp configuration, rp is a remote switch</P><P>- we NAT the source address of the source.</P><P></P><P>Results: ASA drops multicast traffic with the following message:</P><P> %ASA-7-710005: UDP request discarded from 192.168.2.110/1193 to outside:239.255.100.1/1234</P><P></P><P>Packet tracer says:Drop-reason: (security-failed) Early security checks failed</P><P></P><P>Other information:</P><P>When we disconnect the firewall from the rest of the network and conduct isolated local tests with a receiver connected to the inside interface it works fine. But as soon as we connect and pim neighborship and mroute builds up it starts dropping packets.</P><P></P><P>The rest of the network works fine, if we put the source after the firewall (to the inside interface).</P><P></P><P>Any idea?</P><P></P><P>Thanks,</P><P>Rodion</P> Mon, 11 Mar 2019 22:37:14 GMT https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933393#M458614 rodycisco 2019-03-11T22:37:14Z ASA drops multicast stream packets https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933394#M458615 <HTML><HEAD></HEAD><BODY><DIV dir="ltr" style="zoom: 1;">I have the same problem.<P></P></DIV><P></P><P>Anyone?</P></BODY></HTML> Thu, 08 Mar 2012 20:50:29 GMT https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933394#M458615 nmogense 2012-03-08T20:50:29Z ASA drops multicast stream packets https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933395#M458616 <HTML><HEAD></HEAD><BODY><P>Downgrading to 8.3.1 solved the issue.</P><P>This was definitely a software bug in 8.4.1</P></BODY></HTML> Fri, 09 Mar 2012 08:37:09 GMT https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933395#M458616 rodycisco 2012-03-09T08:37:09Z ASA drops multicast stream packets https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933396#M458617 <HTML><HEAD></HEAD><BODY><P>That did it!! </P><P>I really appreciate your help. </P><P>Thanks</P></BODY></HTML> Fri, 09 Mar 2012 11:59:14 GMT https://community.cisco.com/t5/network-security/asa-drops-multicast-stream-packets/m-p/1933396#M458617 nmogense 2012-03-09T11:59:14Z