Inbound TCP connection denied from x.x.x.x/443 to r.r.r.r/xxxx flags RST on interface outside

[ShirleyGaray1580]

I currently have an ASA 5525 and I want the updates made to my servers, services to be carried out, but I get this error Inbound TCP connection denied from x.x.x.x / 443 to x.x.x.x / xxxx flags RST on interface outside

Try to create the access list rule for this incoming traffic but nothing changes

What suggestions do they give? Normally the traffic lets him out, but when he enters, even if the rule is made, it does not work

for example: update.knime.com or update.fortiguard.net

[Sheraz.Salim]

Is that NAT rule is defined? is your server is at inside or at DMZ. as you mentioned RST when traffic is inbound from the outside interface towards server. where as you said from server to outside traffic flow is ok.

show us the nat rule and interface configuration of the outsider and server side. also you can run the command "show conn address x.x.x.x"  where x.x.x.x is your server ip address. display the output here.

[ShirleyGaray1580]

Here the logs
[cid:image002.jpg@01D710EC.26BD37A0]

The internal forti network is nated by a publication so that updates come out, according to the record it shows that the source entry that comes from forti updates is blocked by the public nat ip, even with the rule applied
Outside interface ACL
[cid:image006.jpg@01D710EC.26BD37A0]