cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
12251
Views
10
Helpful
16
Replies

Flow closed by inspection

bgl-group
Level 1
Level 1

I have a problem with a customer trying to reach a server pbo-prd01 in our network over a VPN from ip address 'cust-prd01'where the packets seem to be dropped by 'Flow closed by inspection'
What does this mean and how can i fix it?


The IPS sensor in the firewall is switched off.

cust-prd01 18580 pbo-prd01 1860 Teardown TCP connection 17266 for External:cust-prd01/18580 to Inside:pbo-prd01/1860 duration 0:00:08 bytes 11007 Flow closed by inspection 
cust-prd01 18580 pbo-prd01 1861 Teardown TCP connection 17268 for External:cust-prd01/18580 to Inside:pbo-prd01/1861 duration 0:00:07 bytes 8847 Flow closed by inspection
cust-prd01 18580 pbo-prd01 1862 Teardown TCP connection 17270 for External:cust-prd01/18580 to Inside:pbo-prd01/1862 duration 0:00:06 bytes 8393 Flow closed by inspection   

16 Replies 16

In only see icmp error inspection configured.  Opening a TAC case sounds like a

good idea at this point.

-KS

Thanks for the reply...I dont have any policy-nats, only static nats.

Review Cisco Networking for a $25 gift card