I have a rather stubborn occurrence. I keep getting:
Deny IP spoof from (10.87.88.1) to 10.141.36.60 on interface inside.
This is connected via VPN. 10.87.88.1 is the VPN Termination point. It is a site to site connection. The 10.141.36.60 is the laptop I am using. I am able to ping the other devices which are 10.87.88.2 - up. But I believe it is because of the IP spoof that this is not replying. I have spent three days off and on with this, and even have another engineer working on it with me. For some reason, the firewall thinks that when anything attempts to ping 10.87.88.1, the IP being pinged (or Cisco ASA inside interface) is a spoofed address. I have already tried to turn off unicast reverse path failure. And a myriad of things that this and other sites suggested. Anyone have thoughts on how to resolve. Also I cannot ping this device but I can ssh to it. I am hoping from someone with an "Oh yeah" moment, if not, I can see this post going deep.
