%FWSM-6-106028: Deny TCP (Connection marked for deletion) from src

[JMCNEL]

I received the following error on the FWSM. the IP in question is for a particular server which is part of a group servers and all rules in FWSM apply to the group servers. The user however only have problems accessing this 1 server and not all the servers.

%FWSM-6-106028: Deny TCP (Connection marked for deletion) from src
ip-address/src-port to dst ip-address/dst-port flags flag on interface intf-name

A user which have the correct rights to access all servers is getting a generic "explorer cannot view this page" for this particular server.

I did do a search on the error on the cisco site but need a little bit help troubleshooting this. Any ideas.

Thanks

JNel

[Giorgio Romano]

Hi,

your explanation has been exhaustive.

But the error occurs again.

Now I try to change some settings on the proxies.

I'll keep you posted.

Thank you

giorgio

[shankar1023]

I got the same error in one of the fwsm. It got resolved after interchanging the ACL object groups.