A PIX configured for static NAT translation with the " nail " option will be inspecting the incoming TCP session incorrectly.
The problem exists in release 7.1(2). The problem does not exist in 6.3(5).
To be compatible downgrade the version to 6.3.5.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: