Last weekend I upgraded the ASA5510 from 8.0.4 to 8.2.4. As of Monday, I am having a problem. We are currently using a third-party spam filtering service that forwards our email to us. I have an object group setup that contains the host addresses from this third-party firm. As of Monday, our queue time is significantly longer for receiving the emails. Upon researching my Syslog, I now notice the following entry:
%ASA-4-507003: tcp flow from outside:xxx.xxx.xxx.xxx/40074 to inside:xxx.xxx.xxx.xxx/25 terminated by inspection engine, reason - inspector disconnected, dropped packet.
Upon researching this issue, I see there is no recommended action according to the following Cisco link:
http://www.cisco.com/en/US/docs/security/asa/asa81/system/message/81logmsg.html#wp5871840
Unfortunately, I need to resolve this slow receive time issue and I can't help but imagine that the dropped packets are causing this. Does anybody have ANY ideas besides just bypassing the logging of 507003 messages that could solve my problem?
P.S I did a packet-tracer on the ASA with detailed output and it clearly completes all phases and the final action is "allow."
I never had this issue when running 8.0.4 and I have had this same configuration for the last year with no issues.
