I am recieving the syslog message below: %ASA-2-106016: Deny IP spoof from (IP_address) to IP_address on interface interface_name. A packet arrived at the ASA interface that has a destination IP address of 0.0.0.0 and a destination MAC address of the ASA interface. In addition, this message is generated when the ASA discarded a packet with an invalid source address, which may include one of the following or some other invalid address: • Loopback network (127.0.0.0) • Broadcast  (limited, net-directed, subnet-directed, and all-subnets-directed) • The destination host (land.c) To further enhance spoof packet detection, use the icmp command to configure the ASA to discard packets with source addresses belonging to the internal network, because the access-list command has been deprecated and is no longer guaranteed to work correctly. The from address is my public IP that I pat all traffic from and the to address is my public mail servers DNS name. During the times we receive this message traffic is taking forever to make it out of the firewall. I have tried a few icmp commands but they haven't worked yet. Has anyone seen this before. ... View more

I have configured an ASA 5505 with version 9.2.1 from scratch. I have set up my internal network 10.1.1.0/24 on VLAN 1 and VLAN2 to get IP Add and route via DHCP. I also have set up pat to use the outside address so users can reach the internet. DHCP has been set up as well.  When I connect with a PC it goes out to the internet and everything is okay. As soon as I try to get the second, third, ect devices to the internet it will not allow me. Has anyone seen this before or is there anything I am doing wrong?  ... View more

At our company we just recieved our first two windows 8.1 devices (Surface Pros). We have our ASA 5505 that we use for our remote access VPN for our sales team running version 8.2. We installed Cisco Anyconnect 3.1(which looks completely different from our other version of 2.5) to the two devices and tried to connect. When we start the connection it gets to the posture assessment and fails. Is there something new we have to configure on the ASA. I am fairly new to the security side of cisco and don't have a great amount of experience with the ASA. One thing I did notice is that there are no syslog messages in the ASDM for the ASA that show my new Surface devices trying to connect at all. Not sure either if I have the wrong versions of the anyconnect installed. I appriciate any help in advance.    ... View more