ASA 5520 Deny SPoofing

[Desmond Smith]

Hello All,

I have set up an ASA 5520 pair and I have an external IPSEC Vpn configured for a host coming from a remote office.

The problem that I am having is each time the remote office tries to connect to my 5520 VPN the logs are saying that it is being denied because of IP Spoofing. The host is a valid host and I have checked the mac address to ensure it is the host that is trying to connect to my VPN, so we are good there.

Does anyone know why this would be happening on the outside interface of my 5520 each time the VPN tries to connect?

Remote Pc

1.1.1.1

ASA Outside Interface

2.2.2.2

What I see in the logs:

Deny IP Spoof from (2.2.2.2) to 1.1.1.1 on Outside interface

Thanks in advance!

[Jennifer Halim]

Pls check if there is any routing that might be routed to a different interface than where the traffic is supposed to come in from.