Firewall tear down of connection

suthomas1 — Mon, 11 Mar 2019 16:01:25 GMT

Hi,

I have a query regarding firewalls tearing down the connections.

I was testing one of my webservers, the connection works fine. When i look at logs in firewall for this connection, it shows below:-

|Aug 01 2009 14:13:21|302013: Built inbound TCP connection 12379739847949979872

for VPN:192.168.100.249026 (192.168.100.2/49026) to APP:192.168.200.10/7014 (192.168.200.10/7014)

Aug 01 2009 14:13:23|302014: Teardown TCP connection 12379739847949979839 for

VPN:192.168.100.249026to APP:192.168.200.10/7014 duration 0:00:03 bytes 15106 TCP

FINs

Why does the firewall built & then immediately(within 3 secs) try to break the connection as seen above.But even so , the web page works fine & am able to use it.

Please advise.

Thanks!

Re: Firewall tear down of connection

Kureli Sankar — Tue, 04 Aug 2009 02:09:17 GMT

Tear down reason TCP FINs means that the connection was gracefully closed.

You need to collect captures to see exactly what happens and who sends the first fin ack.

Here is the link to the syslog that you are seeing:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/system/message/logmsgs_external_docbase_0900e4b1804ca185_4container_external_docbase_0900e4b1805ba0fa.html#wp1280675

topic Firewall tear down of connection in Network Security

Firewall tear down of connection

Re: Firewall tear down of connection