https://community.cisco.com/t5/network-security/fin-ack-psh/m-p/680352#M87707 <P>Hi All,</P><P></P><P>1. We've one web server which is accessible from outside.</P><P>Rule</P><P>Any Web Server http/https</P><P></P><P>I am seeing lot of drops by clean up rule on daily basis from the web server to internet sites. On running snoop i see when web server is sending to Internet IP's; FIN + ACK flag is set but in further few packets i see FIN+ACK+PSH which makes me in loop why its sending FIN+ACK+PSH. also why am i seeing so many drop from my web server to internet with source port as https and destinaiton port random., is the reason for those drops is FIN+ACK+PSH</P> Sun, 10 Mar 2019 10:26:21 GMT yogendra.trivedi 2019-03-10T10:26:21Z https://community.cisco.com/t5/network-security/fin-ack-psh/m-p/680352#M87707 <P>Hi All,</P><P></P><P>1. We've one web server which is accessible from outside.</P><P>Rule</P><P>Any Web Server http/https</P><P></P><P>I am seeing lot of drops by clean up rule on daily basis from the web server to internet sites. On running snoop i see when web server is sending to Internet IP's; FIN + ACK flag is set but in further few packets i see FIN+ACK+PSH which makes me in loop why its sending FIN+ACK+PSH. also why am i seeing so many drop from my web server to internet with source port as https and destinaiton port random., is the reason for those drops is FIN+ACK+PSH</P> Sun, 10 Mar 2019 10:26:21 GMT https://community.cisco.com/t5/network-security/fin-ack-psh/m-p/680352#M87707 yogendra.trivedi 2019-03-10T10:26:21Z