Firewall ASP Drops

[Alex Pfeil]

I was wondering if it is normal to have millions of drops for the below asp drop. I have a situation where an internet firewall has 34 million over 5 days. I have multiple other firewalls that have a lot less traffic on them and they do have millions of drops over significantly longer periods of time. Is there anything I should look at? One comment would be that the traffic looks like legitimate return traffic from public web servers.

Connection to PAT address without pre-existing xlate (nat-no-xlate-to-pat-pool)

[Alex Pfeil · Accepted solution]

It looks like seeing these drops are normal traffic on the network. I have not been able to find any additional information other than that I have multiple firewalls and there are a lot of drops for nat-no-xlate-to-pat-pool.