Read Ciscos answer below. I can't find the bug-id anywhere at Ciscos website though... "I have done some reasearch on this issue, and have come across an instance that matches your problem... When the connection to an outside web server terminates, the inside host sends a FIN packet back to the web server. On some occasions, the we server returns a FIN ACK back to the host. But since the stateful firewall has already seen the first FIN go outbound it closed the connection and removed it from the state table. THis will cause the acknowledgement of the FIN to be denied on the outside interface because the state no longer exists. This is generating the 106023 syslog message. This is related to an old bug that affected PIX 6.3 and has reappeared in PIX 7.1, this bug ID is CSCef38784."
... View more
We have'nt really experienced any problems, but the cpu on the new firewall is a lot faster than the old one so maybe that's why the latency is not noticed? I hope Cisco will provide us with an answer soon...
... View more
Yes indeed, our syslog file gets flooded with these messages after upgrading to an ASA 5510 with 7.1.1 binary. Our http and https traffic seems to get through the firewall but we get the same messages you do every 3 seconds or so during daytime (approx. 150 users inside). Our sales partner in sweden, Ementor, says they're talking to Cisco about this, let us hope for an answer soon.
... View more
