Dear Cisco Community,
We implement TCP Intercept in intercept mode, unfortunately we discovered connection problems to the servers, we changed the mode to watch, the connection problems did not disappear unless we removed the feature completely.
1. -> TCP Intercept mode intercept: Caused connection problems
2. -> TCP Intercept mode watch: Caused connection problems
3. -> TCP Intercept mode watch, exclude the subnet from the ACL: Caused still connection problems for the removed subnet
4. -> Removal of the whole config actually stopped the connection problems.
Well, we are not 100% sure about the watch mode and removal of the ACL because we did not reproduce the problem. But what I can 100% say that the intercept mode caused problems for messaging, clarify, citrix services.
Who can tell us if we did a failure or did we run into bug?
We have Catalysts 6506, Sup720 with IOS version 12.2(17d)SBX in place. The bug tool did not show me any problems related to this feature and IOS version.
Thank you.
Cheers Alex
