topic Re: difference ASA 8.0.2 and 8.0.4 in Network Security

difference ASA 8.0.2 and 8.0.4

lukasdrbo — Mon, 11 Mar 2019 14:06:34 GMT

Hi,

i have strange problem with access by ipsec client: with ASA 8.0.2 all is ok but with ASA 8.0.4 some TCP connection through ipsec client arent association (rdp, sql, etc..). With SSL client on ASA 8.0.4 all traffic is ok too.

Sometimes i logging deny tcp (no connection).

Do you have any idea where is problem please ?

lukas

Re: difference ASA 8.0.2 and 8.0.4

purohit_810 — Sun, 02 Nov 2008 18:01:03 GMT

Hi,

Can you see in Caveats? is there any Caveats open?

I haven't perfect error from you so i can't say.

Thanks,

Dharmesh Purohit

Re: difference ASA 8.0.2 and 8.0.4

lukasdrbo — Tue, 04 Nov 2008 11:17:23 GMT

Hi,

maybe this:

Deny TCP (no connection) from vpn_range to lan_srv/3389 flags ACK on interface ext

Deny TCP (no connection) from vpn_range to lan_srv/3389 flags FIN PSH ACK on interface ext

but i havent idea. its rdp to one server, rdp to others servers are ok. if i reboot ios to 8.0.2, this connection to lan_srv is ok. i dont understand to it :-(. (without changing cfg of course)

thx,

Lukas

Re: difference ASA 8.0.2 and 8.0.4

lukasdrbo — Wed, 05 Nov 2008 13:17:46 GMT

its same problem as here http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=Security&topicID=.ee6b2b8&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc1f2d4

Re: difference ASA 8.0.2 and 8.0.4

lukasdrbo — Mon, 10 Nov 2008 11:15:38 GMT

solution is disable IP Compression in the ipsec group-policy

lukas