topic Re: Connection problem over vpn - reassembly limit of 8192 bytes in Network Security https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278888#M824570 <HTML><HEAD></HEAD><BODY><P>Some 8.0 versions had some sql issues that were fixed in later versions.</P><P></P><P>If this ends up needing troubleshooting please open a case with TAC to look at it.</P><P></P><P>PK</P><P></P></BODY></HTML> Tue, 10 Nov 2009 14:40:36 GMT Panos Kampanakis 2009-11-10T14:40:36Z Connection problem over vpn - reassembly limit of 8192 bytes exceeded https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278884#M824515 <P>Hi,</P><P></P><P>I have two locations and these two sites are connected with site-to-site vpn. One site has ASA firewall and other site is checkpoint ADSL. When the checkpoint side tries to reach a server in other side it can ping but the application cannot connect and I see the error in asa logs. What can be the problem ?</P><P></P><P>Thanks</P><P></P><P>Terminating TCP-Proxy connection from WAN_ADSL:x.x.x.x to LAN:y.y.y.y - reassembly limit of 8192 bytes exceeded</P><P></P><P>Teardown TCP-PROXY connection from WAN_ADSL:x.x.x.x to LAN:y.y.y.y duration 0:00:01 bytes 22320 Flow closed by inspection</P> Mon, 11 Mar 2019 16:37:56 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278884#M824515 blackswans 2019-03-11T16:37:56Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278885#M824517 <HTML><HEAD></HEAD><BODY><P>This message is displayed when reassembly buffer limit is exceeded during assembling TCP segments. </P><P>What protocol is the app using, what ports? Amybe disabling the corresponding inspection for that protocol would help.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Mon, 09 Nov 2009 14:46:56 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278885#M824517 Panos Kampanakis 2009-11-09T14:46:56Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278886#M824519 <HTML><HEAD></HEAD><BODY><P>It is Oracle and using 1521 tcp.</P><P>I disabled sqlnet inspection but it didnt worked. Now I will upgrade the asa image and try again.</P></BODY></HTML> Mon, 09 Nov 2009 14:49:22 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278886#M824519 blackswans 2009-11-09T14:49:22Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278887#M824543 <HTML><HEAD></HEAD><BODY><P>Yes, slq uses TCP port 1521.</P><P></P><P>Whate version of ASA are you using?</P><P>If you translating the ip address if the sql traffic then it won't work without inspection.</P><P></P><P>PK</P><P></P></BODY></HTML> Tue, 10 Nov 2009 14:39:25 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278887#M824543 Panos Kampanakis 2009-11-10T14:39:25Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278888#M824570 <HTML><HEAD></HEAD><BODY><P>Some 8.0 versions had some sql issues that were fixed in later versions.</P><P></P><P>If this ends up needing troubleshooting please open a case with TAC to look at it.</P><P></P><P>PK</P><P></P></BODY></HTML> Tue, 10 Nov 2009 14:40:36 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278888#M824570 Panos Kampanakis 2009-11-10T14:40:36Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278889#M824614 <HTML><HEAD></HEAD><BODY><P>I solved the problem by upgrading to latest version and removing sql inspection.</P><P></P><P></P></BODY></HTML> Tue, 10 Nov 2009 14:58:15 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278889#M824614 blackswans 2009-11-10T14:58:15Z Re: Connection problem over vpn - reassembly limit of 8192 bytes https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278890#M824649 <HTML><HEAD></HEAD><BODY><P>I have the following question for Cisco Folks regarding sqlnet inspection. </P><P></P><P>About 99% of my Pix/ASA firewall deployment that involves sqlnet, I have to disable inspection on the firewall for it to work properly. What is the point of enabling this feature if it is causing nothing but headache.</P><P></P><P>Thanks. David</P></BODY></HTML> Tue, 10 Nov 2009 17:27:33 GMT https://community.cisco.com/t5/network-security/connection-problem-over-vpn-reassembly-limit-of-8192-bytes/m-p/1278890#M824649 cisco24x7 2009-11-10T17:27:33Z