Problem with TCP Connection

[Jewgeni Uschegow]

hi everyone,
I have ACL on the ASA that allow TCP connection between two networks. It works well, but sometimes ASA block this rule and I have to off und on this rule. Done it works again. I think it is because the TCP Stack between hosts in the networks is bad.
What can I do to ASA doesn't block the rule.

Best regards

[Karsten Iwen · Accepted solution]

There are three options available:

1. If it is really based on a bad TCP-stack of the endpoints, update them to a recent version or replace them.
2. The ASA could have a bug that causes the traffic to be dropped. I recently had that with Citrix-traffic and an ASA update solved the problem.
3. You could configure TCP-state-bypass to disable checks in the ASA.