Built Teardown and Deny Issue

[jay.digwa]

Guys,

We are struggling to determine a cause for a firewall (ASA 9.1 (3))  issue. The log is attached.

We have basically created a rule for iPhones (172.26.x.x)  to access a host in another external network.(10.220.x.x)

The rule allows the source network to communicate with the destination network over services 'IP' and 'ICMP'. The firewall is getting hit but I think there is an issue on the reverse path as indicated in the attachments and the flags associated with the log messages.

Many thanks

[Alex Sanchez Jimenez]

Hello Jay,

This question should be directed to the Security area, feel free to upload the configuration from the ASA for further reference.

Regards,

Alex Sanchez

CCIE R&S #37454