Can ASA ignore TCP reset messages

[carl_townshend]

Hi all

is it possible to get my ASA firewall to ignore incoming TCP resets coming from outside ?

cheers

[Karsten Iwen]

You could configure state-bypass for your traffic in question. But why do you want to ignore TCP-RST in the ASA?

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[carl_townshend]

because we are having issues using our corporate web proxy in China, the vendor said to do this and it should work?

cheers

[Karsten Iwen]

Ok, then the state-bypass is *not* an option. I assume you need a dedicated box in front of the firewall that woould filter the RST out. But I have no idea which vendor can be used for that.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni