topic Re: Sqlnet Inspection in Network Security https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441813#M766656 <HTML><HEAD></HEAD><BODY><P>Not that you could be hitting defect "CSCta03382: SQLNET query via inspection cause communication errors".</P><P>ASA version 8.0.5 fixes it.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Tue, 27 Apr 2010 23:11:33 GMT Panos Kampanakis 2010-04-27T23:11:33Z Sqlnet Inspection https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441811#M766622 <P>I've recently upgraded my PIX 535 cluster from 7.2 to 8.0.4(32). Since the upgrade we have been experiencing blocking sessions on one of our DB servers and associated performance issues. I have checked the logs but I cannot see a message to state that sql inspection is the cause. I would expect to see something like</P><P></P><P><SPAN style="font-size: 10pt; color: #000000; font-family: courier new,courier; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-fareast-language: ES; mso-ansi-language: ES;">%ASA-6-302014: Teardown TCP connection...Flow closed by inspection</SPAN></P><P></P><P><SPAN style="font-size: 10pt; color: #000000; font-family: courier new,courier; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-fareast-language: ES; mso-ansi-language: ES;">I have since turned off sql inspection and the problem has not reappeared.</SPAN></P><P></P><P><SPAN style="font-size: 10pt; color: #000000; font-family: courier new,courier; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-fareast-language: ES; mso-ansi-language: ES;">Is SQL inspection likely to be the cause here and if so why didn't I see the associated messages in the syslog which is set to record informational events?</SPAN></P><P></P><P></P><P><SPAN style="font-size: 10pt; color: #000000; font-family: courier new,courier; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-fareast-language: ES; mso-ansi-language: ES;">Thanks</SPAN></P><P><SPAN style="font-size: 10pt; color: #000000; font-family: courier new,courier; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-fareast-language: ES; mso-ansi-language: ES;">Paul</SPAN></P> Mon, 11 Mar 2019 17:37:46 GMT https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441811#M766622 paul.schofield 2019-03-11T17:37:46Z Re: Sqlnet Inspection https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441812#M766640 <HTML><HEAD></HEAD><BODY><P>Hi Paul,</P><P></P><P>There was a bug regarding the same. When we upgrade to 8.0.4, the sqlnet traffic is disrupted and the syslogs seen at the time of issue are asfollows:</P><P></P><PRE style="font-size: 12px; font-family: monospace;">%ASA-6-302014: Teardown TCP connection...Flow closed by inspection <BR /> <BR /> But as you mentioned, you do not get any such syslog. Can you enable the inspection again and collect the debugs as follows:<BR /> <BR /> debug sqlnet 255<BR /> <BR /> Also, please send me the following:<BR /> <BR /> show tech<BR /> syslogs<BR /> show service-policy<BR /> debug sqlnet 255<BR /> <BR /> <BR /> Regards,<BR /> <BR /> Ashu.<BR /> </PRE></BODY></HTML> Tue, 27 Apr 2010 18:53:42 GMT https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441812#M766640 astripat 2010-04-27T18:53:42Z Re: Sqlnet Inspection https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441813#M766656 <HTML><HEAD></HEAD><BODY><P>Not that you could be hitting defect "CSCta03382: SQLNET query via inspection cause communication errors".</P><P>ASA version 8.0.5 fixes it.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Tue, 27 Apr 2010 23:11:33 GMT https://community.cisco.com/t5/network-security/sqlnet-inspection/m-p/1441813#M766656 Panos Kampanakis 2010-04-27T23:11:33Z