cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
642
Views
0
Helpful
1
Replies

ASA Flags show Syn but server will not connect

tjreeddoc
Level 1
Level 1

                   All,

I am trying to troubleshoot a server which will not connect to Microsofts' download servers.

Below is the capture of the packets coming into the interface on the ASA

I can see packets coming from the server (192.168.4.131) going to the Microsoft server (65.55.184.155).

I see the SYN flag (S) set. 

But the servers never connect.

When I run packet tracer, it says allow.

Please note:  This happens no matter what Microsoft download server we try to connect to.

Thank you

capture.png

1 Reply 1

Hello Reed,

Can you clear the statistics as below

clear service-policy global

Clear ASP drop

Then try to connect with the MS server and wait for the error to happen after that, take the output of the below and post

sh service-policy global

sh asp drop

regards

Harish.

regards

Harish

Review Cisco Networking for a $25 gift card