We have a problem where the source IP is in the internal network and the destination in the VPN. Source IP is sending multiple requests on several different ports to destination IP.
We remove the source IP from DHCP so that no one can receive an address and we block access from the source to the destination in the ACL. This is generating numerous logs on the ASA and causing high CPU consumption of the device. Could you help us with this issue? We removed the source IP from the ARP table of the equipment and we saw that there is no open session inside the VPN with the destination IP.
Log: Received duplicate TCP SYN from in_interface:src_address/src_port to out_interface:dest_address/dest_port with different initial sequence number.
Grateful!
