SFR requested to drop pkt" msg on ASA when SSL policy used CSCuy32278

[collinsjl]

The subject line also appears when I have no SSL policy and I directed the traffic to the SFR module.  New install.

Looks like any outbound traffic from the inside destined port 443.

[Aastha Bhardwaj]

Hi,

When you are not using SSL policy it is expected that you see those messages because all encrypted traffic like for port 443 , SFR does not understand it and hence requests ASA to drop the packet .

Though the Enhancement that you have mentioned is only valid in case of SSL policy because when we are decrypting/re-encrypting packets we drop the original and inject the newly re-encrypted packet.  So with the ssl policy enabled (and ssl traffic) the SFR requested drop counter in the ASA will increment.

Regards,

Aastha Bhardwaj

Rate if that helps!!!