Replay window failure ???????

[chrissmolen]

I am seeing this message popping up in the log pretty regularly:

Replay window failure (rcv'd 28312, current 28312) - discarding packet!

Any ideas as to what this means???

[drolemc]

I've been told that VPN 3000 maintains a sliding window for ESP packet sequence number. If a packet is received out of the window, the packet will be dropped (anti-replay) and this error is generated. If it isn't appearing too often, I think it should be safe to ignore the message.