cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2387
Views
0
Helpful
10
Replies

WAAS and PIX Firewalls

brobinson
Level 1
Level 1

Hi -

We are going into a WAAS deployment and have PIX firewalls running 6.3 code. We are looking to place the WAAS devices on the inside of our firewalls at each end. They will be deployed with WCCP, not inline mode.

I know the "inspect" commands are available in 7.x code, but it will be a big pain to upgrade these firewalls.

From what I read, the WAAS devices use IP or TCP options. Is this true? That's why you need the inspect on 7.x? Is there a way to preserve the options in 6.3 code?

Thanks in advance for a reply! : )

10 Replies 10

Zach Seils
Level 7
Level 7

Ben,

If the PIX firewalls will reside in the optimized connections, you will need to upgrade to 7.2.1 or later to support inspection of the traffic.

Regards,

Zach

Thanks for the reply Zach. Quick question -

If we simply "allow" the traffic via ACLs, would this be good enough? Or do we need the "inspect waas" to preserve the TCP options or whatever?

Ben

Ben,

Simply permitting the traffic via ACLs isn't good enough. The 'inspect waas' command is required to allow for the sequence number shift that occurs on the optimized connections.

Zach

Okie Dokie. Thank you!

ok thats about pix firewall but what about ios router firewalls i have a routers that have inspect commands ( to inspect ftp or telnet... its) will i face the same problme that i have to upgrade ios in these routers to be able to inspect waas traffic

Here are the minimum software versions that support interoperability with WAAS:

IOSFW - 12.4(11)T2

ASA/PIX - 7.2.3

FWSM - 3.2.1

Thanks,

Zach

Hi Zach;

I am doing one WAAS POC, and I have the problem of the no optmization connections. I reconfigured my appliances, but the prooblem happen, yet.

I would like if pix version ( 6.3.5 ) can to be the my problem?

The brief topology is in attach files.

Regards;

Fabio

Follow any outputs:

REMOTE SITE#SH STaTistics COnnection

Current Active Optimized Flows:                      10
   Current Active Optimized TCP Plus Flows:          9
   Current Active Optimized TCP Only Flows:          0
   Current Active Optimized TCP Preposition Flows:   0
Current Active Auto-Discovery Flows:                 13
Current Reserved Flows:                              10
Current Active Pass-Through Flows:                   88
Historical Flows:                                    200


D:DRE,L:LZ,T:TCP Optimization RR:Total Reduction Ratio
A:AOIM,C:CIFS,E:EPM,G:GENERIC,H:HTTP,M:MAPI,N:NFS,S:SSL,V:VIDEO

ConnID        Source IP:Port          Dest IP:Port            PeerID Accel RR  
  4061    172.25.101.46:1843      10.40.25.25:8014 00:1a:64:f2:23:81 TA    00.0%
  4062    172.25.101.21:3053      10.40.10.102:139 00:1a:64:f2:23:81 TA    00.0%
  4063   172.25.101.180:3919     10.40.10.197:8080 00:1a:64:f2:23:81 TA    00.0%
  4064    172.25.101.68:4001      10.40.10.31:1417 00:1a:64:f2:23:81 TA    00.0%
  4065    172.25.101.54:1703     10.40.10.197:8080 00:1a:64:f2:23:81 TA    00.0%
  4066    172.25.101.21:3081      10.44.29.21:1026 00:1a:64:f2:23:81 TA    00.0%
  4067    172.25.101.47:1567      10.42.25.25:8014 00:1a:64:f2:23:81 TA    00.0%
  4068  172.25.200.250:29314      10.40.100.25:443 00:1a:64:f2:23:81 TA    00.0%
  4069   172.25.101.180:3939     10.40.10.197:8080 00:1a:64:f2:23:81 TA    00.0%
  4070    172.25.101.24:3123     10.40.15.87:10051 00:1a:64:f2:23:81 TA    00.0%

O-ST: Origin State, T-ST: Terminal State
E: Established, S: Syn, A: Ack, F: Fin, R: Reset
s: sent, r: received, O: Options, P: Passthrough

Local IP:Port       Remote IP:Port      Peer ID           O-ST T-ST ConnType   
10.42.25.25:8014    172.25.101.62:3083  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT
10.42.25.25:8014    172.25.101.54:1723  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT
172.25.101.24:10050 10.40.15.87:45117   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
172.25.101.22:10050 10.40.15.87:54799   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
172.25.101.22:10050 10.40.15.87:53856   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
172.25.101.22:10050 10.40.15.87:54342   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
172.25.101.24:10050 10.40.15.87:38569   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
172.25.101.24:10050 10.40.15.87:38611   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
10.40.10.102:389    172.25.101.22:1984  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT
10.40.10.31:1417    172.25.101.68:4006  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT
172.25.101.21:445   10.42.10.198:3639   00:1a:64:f2:23:81 SAsO SAr  EXTERNAL SERVER
10.40.10.197:8080   172.25.101.54:1722  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT
10.40.10.197:8080   172.25.101.54:1721  00:1a:64:f2:23:81 Sr   Sso  EXTERNAL CLIENT

Local IP:Port         Remote IP:Port        Peer ID           ConnType         
172.25.101.151:1062   10.40.15.139:5061     N/A               PT In Progress   
10.40.10.102:1026     172.25.101.167:4058   N/A               PT In Progress   
172.25.101.160:1663   192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
199.105.179.227:8292  172.25.101.164:8278   N/A               PT In Progress   
10.40.10.31:1417      172.25.101.162:2598   N/A               PT In Progress   
10.40.17.107:1494     172.25.101.59:4325    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.102:389      172.25.101.21:3099    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.17.102:1494     172.25.101.69:2151    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.160:1086   10.40.15.139:5061     N/A               PT In Progress   
10.40.10.197:11801    172.25.101.68:3790    N/A               PT App Cfg       
10.40.10.197:8080     172.25.101.54:1720    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.21:3101    10.40.10.102:389      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.21:10050   10.40.15.87:58088     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.62:1602    10.40.17.107:1494     N/A               PT In Progress   
10.40.17.102:1494     172.25.101.42:1240    N/A               PT In Progress   
10.40.10.102:389      172.25.101.22:1980    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.164:2829   192.168.206.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.170:4868   10.40.15.156:80       N/A               PT In Progress   
172.25.101.164:1960   10.40.15.139:5061     N/A               PT In Progress   
172.25.101.21:3099    10.40.10.102:389      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.94:445       172.25.101.22:1976    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.22:1977    10.40.10.94:139       00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.22:10050   10.40.15.87:51185     00:1a:64:f2:23:81 PT Asymmetric    
192.168.207.15:44718  172.25.101.151:1215   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
192.168.207.15:44718  172.25.101.166:1531   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.22:1976    10.40.10.94:445       00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.22:139     10.42.10.57:1513      00:1a:64:f2:23:81 PT Asymmetric    
10.40.15.87:50394     172.25.101.22:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.10.197:8080     172.25.101.54:1719    N/A               PT In Progress   
10.40.15.156:80       172.25.101.170:4869   N/A               PT In Progress   
10.40.32.128:3630     172.25.101.21:445     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.64:2068    10.40.15.156:80       00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.21:139     10.44.31.44:1623      00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.151:1215   192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.42:1240    10.40.17.102:1494     N/A               PT In Progress   
10.42.10.57:1513      172.25.101.22:139     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.163:1769   10.40.10.31:1417      N/A               PT In Progress   
192.168.207.15:44718  172.25.101.41:1213    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.69:1273    10.40.17.107:1494     00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.24:10050   10.40.15.87:37482     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.167:3988   10.40.15.139:5061     N/A               PT In Progress   
10.40.10.197:43079    172.25.101.68:1284    N/A               PT In Progress   
172.25.101.62:3069    10.42.25.25:8014      N/A               PT In Progress   
172.25.101.59:4279    10.40.17.102:1494     N/A               PT In Progress   
172.25.101.47:4625    10.40.17.107:1494     00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.166:2849   N/A               PT In Progress   
172.25.101.164:8278   199.105.179.227:8292  N/A               PT In Progress   
192.168.206.15:44718  172.25.101.151:1214   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.42:1165    N/A               PT In Progress   
172.25.101.72:1643    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.54:1720    10.40.10.197:8080     00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.166:1530   192.168.206.15:44718  N/A               PT In Progress   
172.25.101.164:8277   199.105.179.20:8292   N/A               PT In Progress   
10.40.15.87:59095     172.25.101.21:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.10.31:1417      172.25.101.42:1167    N/A               PT In Progress   
10.40.15.87:35209     172.25.101.24:10050   00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.166:2849   10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1417      172.25.101.61:1454    N/A               PT In Progress   
10.40.15.139:5061     172.25.101.166:4585   N/A               PT In Progress   
172.25.101.64:2066    10.40.15.156:80       00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.42:1167    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.42:2161    10.40.10.102:1026     N/A               PT In Progress   
10.40.10.102:1026     172.25.101.42:2408    N/A               PT In Progress   
10.42.25.25:8014      172.25.101.62:3069    N/A               PT In Progress   
172.25.101.62:3076    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.151:1214   192.168.206.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.170:4869   10.40.15.156:80       N/A               PT In Progress   
192.168.206.15:44718  172.25.101.159:1187   N/A               PT In Progress   
172.25.101.152:2984   10.40.10.197:8080     N/A               PT In Progress   
172.25.101.24:10050   10.40.15.87:35209     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.22:1975    10.40.10.102:389      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.85:4681      172.25.101.21:139     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.164:2830   192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.139:5061     172.25.101.158:1130   N/A               PT In Progress   
10.40.10.31:1417      172.25.101.46:1844    N/A               PT In Progress   
10.40.10.31:1417      172.25.101.162:2646   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.68:1272    10.40.10.197:42465    N/A               PT In Progress   
172.25.101.41:1213    192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
192.168.207.16:44718  172.25.101.69:1413    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.62:3082    N/A               PT In Progress   
199.105.179.20:8292   172.25.101.164:8277   N/A               PT In Progress   
10.40.10.102:389      172.25.101.22:1982    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.44.31.44:1623      172.25.101.21:139     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.42:2408    10.40.10.102:1026     N/A               PT In Progress   
10.40.15.87:60046     172.25.101.21:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.10.102:1026     172.25.101.42:2161    N/A               PT In Progress   
172.25.101.68:3790    10.40.10.197:11801    N/A               PT App Cfg       
172.25.101.21:139     10.40.10.85:4681      00:1a:64:f2:23:81 PT Asymmetric    
10.40.15.87:51254     172.25.101.22:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.17.107:1494     172.25.101.69:1273    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.69:2151    10.40.17.102:1494     00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.197:8080     172.25.101.54:1717    N/A               PT In Progress   
172.25.101.160:1662   192.168.206.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.52:1181    N/A               PT In Progress   
172.25.101.159:1189   192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.87:51185     172.25.101.22:10050   00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.21:445     10.40.10.172:14095    00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.21:445     10.40.32.128:3630     00:1a:64:f2:23:81 PT Asymmetric    
10.40.15.156:80       172.25.101.64:2066    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
192.168.206.15:44718  172.25.101.166:1530   N/A               PT In Progress   
172.25.101.59:4325    10.40.17.107:1494     00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.197:8080     172.25.101.152:2984   N/A               PT In Progress   
10.40.15.139:5061     172.25.101.154:3473   N/A               PT In Progress   
172.25.101.42:1165    10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1417      172.25.101.61:1437    N/A               PT In Progress   
172.25.101.163:2626   10.41.22.31:139       N/A               PT In Progress   
172.25.101.22:1980    10.40.10.102:389      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.172:14095    172.25.101.21:445     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.22:10050   10.40.15.87:50394     00:1a:64:f2:23:81 PT Asymmetric    
10.40.15.87:57663     172.25.101.21:10050   00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.61:1437    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.42:1242    10.40.17.102:1494     N/A               PT In Progress   
172.25.101.69:1412    192.168.206.16:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.102:389      172.25.101.22:1975    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.71:2538    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.22:10050   10.40.15.87:51254     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.159:1187   192.168.206.15:44718  N/A               PT In Progress   
10.40.10.31:1417      172.25.101.72:1643    N/A               PT In Progress   
172.25.101.54:1717    10.40.10.197:8080     N/A               PT In Progress   
172.25.101.167:4056   10.40.10.102:1026     N/A               PT In Progress   
10.40.15.139:5061     172.25.101.51:3188    N/A               PT In Progress   
192.168.206.15:44718  172.25.101.160:1662   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.87:35513     172.25.101.24:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.10.31:1417      172.25.101.71:2538    N/A               PT In Progress   
172.25.101.166:4585   10.40.15.139:5061     N/A               PT In Progress   
172.25.101.154:3473   10.40.15.139:5061     N/A               PT In Progress   
172.25.101.158:1130   10.40.15.139:5061     N/A               PT In Progress   
10.40.17.102:1494     172.25.101.59:4279    N/A               PT In Progress   
172.25.101.62:3082    10.40.10.31:1417      N/A               PT In Progress   
10.42.25.25:8014      172.25.101.54:1696    N/A               PT In Progress   
10.40.10.102:1026     172.25.101.167:4056   N/A               PT In Progress   
10.40.15.87:58088     172.25.101.21:10050   00:1a:64:f2:23:81 PT Asymmetric    
10.40.10.31:1417      172.25.101.166:2831   N/A               PT In Progress   
172.25.101.166:2831   10.40.10.31:1417      N/A               PT In Progress   
192.168.207.15:44718  172.25.101.160:1663   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.41:1212    192.168.206.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.163:1769   N/A               PT In Progress   
172.25.101.61:1454    10.40.10.31:1417      N/A               PT In Progress   
10.40.17.107:1494     172.25.101.62:1602    N/A               PT In Progress   
172.25.101.52:1181    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.24:10050   10.40.15.87:35513     00:1a:64:f2:23:81 PT Asymmetric    
10.40.15.139:5061     172.25.101.151:1062   N/A               PT In Progress   
172.25.101.51:3188    10.40.15.139:5061     N/A               PT In Progress   
10.40.15.156:80       172.25.101.170:4868   N/A               PT In Progress   
192.168.206.16:44718  172.25.101.69:1412    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.139:5061     172.25.101.164:1960   N/A               PT In Progress   
172.25.101.54:1719    10.40.10.197:8080     N/A               PT In Progress   
172.25.101.166:1531   192.168.207.15:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.54:1696    10.42.25.25:8014      N/A               PT In Progress   
10.40.17.102:1494     172.25.101.42:1242    N/A               PT In Progress   
10.40.15.87:59892     172.25.101.21:10050   00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.21:10050   10.40.15.87:57663     00:1a:64:f2:23:81 PT Asymmetric    
10.40.17.107:1494     172.25.101.47:4625    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.69:1413    192.168.207.16:44718  00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.87:37482     172.25.101.24:10050   00:1a:64:f2:23:81 PT Asymmetric    
192.168.206.15:44718  172.25.101.164:2829   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.139:5061     172.25.101.160:1086   N/A               PT In Progress   
172.25.101.22:1982    10.40.10.102:389      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.21:10050   10.40.15.87:59095     00:1a:64:f2:23:81 PT Asymmetric    
10.41.22.31:139       172.25.101.163:2626   N/A               PT In Progress   
172.25.101.167:4058   10.40.10.102:1026     N/A               PT In Progress   
172.25.101.68:1284    10.40.10.197:43079    N/A               PT In Progress   
10.40.10.197:42465    172.25.101.68:1272    N/A               PT In Progress   
172.25.101.162:2598   10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1417      172.25.101.62:3076    N/A               PT In Progress   
10.40.15.139:5061     172.25.101.167:3988   N/A               PT In Progress   
172.25.101.21:10050   10.40.15.87:60046     00:1a:64:f2:23:81 PT Asymmetric    
192.168.206.15:44718  172.25.101.41:1212    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
192.168.207.15:44718  172.25.101.159:1189   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
192.168.207.15:44718  172.25.101.164:2830   00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.94:139       172.25.101.22:1977    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.162:2646   10.40.10.31:1417      00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.15.156:80       172.25.101.64:2068    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
10.40.10.102:389      172.25.101.21:3101    00:1a:64:f2:23:81 PT Peer AOIM Sync in Pr
172.25.101.21:10050   10.40.15.87:59892     00:1a:64:f2:23:81 PT Asymmetric    
172.25.101.46:1844    10.40.10.31:1417      N/A               PT In Progress  

WAE-DC-CORE#SH STATistics COnnection

Current Active Optimized Flows:                      7
   Current Active Optimized TCP Plus Flows:          7
   Current Active Optimized TCP Only Flows:          0
   Current Active Optimized TCP Preposition Flows:   0
Current Active Auto-Discovery Flows:                 19
Current Reserved Flows:                              10
Current Active Pass-Through Flows:                   289
Historical Flows:                                    200


D:DRE,L:LZ,T:TCP Optimization RR:Total Reduction Ratio
A:AOIM,C:CIFS,E:EPM,G:GENERIC,H:HTTP,M:MAPI,N:NFS,S:SSL,V:VIDEO

ConnID        Source IP:Port          Dest IP:Port            PeerID Accel RR  
  8192     10.40.15.87:38710   172.25.101.22:10050 00:23:7d:06:4e:7c TA    00.0%
  8193     10.40.15.87:45117   172.25.101.24:10050 00:23:7d:06:4e:7c TA    00.0%
  8196     10.42.10.198:3639     172.25.101.21:445 00:23:7d:06:4e:7c TA    00.0%
  8198     10.40.15.87:53856   172.25.101.22:10050 00:23:7d:06:4e:7c TA    00.0%
  8200     10.40.15.87:42552   172.25.101.24:10050 00:23:7d:06:4e:7c TA    00.0%
  8201       10.41.4.41:2001       10.40.10.31:135               N/A E     00.0%
  8202     10.40.15.87:48193   172.25.101.21:10050 00:23:7d:06:4e:7c TA    00.0%

O-ST: Origin State, T-ST: Terminal State
E: Established, S: Syn, A: Ack, F: Fin, R: Reset
s: sent, r: received, O: Options, P: Passthrough

Local IP:Port       Remote IP:Port      Peer ID           O-ST T-ST ConnType   
10.40.10.197:8080   172.25.101.54:1743  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.10.197:8080   172.25.101.54:1742  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.41.1.151:445     10.42.10.27:65440   N/A               Sr   Ss   EXTERNAL CLIENT
10.41.1.151:139     10.42.10.27:65441   N/A               Sr   Ss   EXTERNAL CLIENT
10.41.1.151:139     10.42.10.27:65442   N/A               Sr   Ss   EXTERNAL CLIENT
10.40.10.197:8080   172.25.101.180:3939 00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
172.25.101.21:139   172.1.0.6:4200      00:23:7d:06:4e:7c Sr   Sso  EXTERNAL CLIENT
10.40.100.25:443    172.25.200.250:2931400:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.10.31:135     172.25.101.41:2426  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.10.102:389    172.25.101.22:1992  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.25.25:8014    172.25.101.46:1862  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.15.87:10051   172.25.101.24:3123  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
172.25.101.21:445   10.42.10.198:4186   00:23:7d:06:4e:7c Sr   Sso  EXTERNAL CLIENT
10.41.1.54:135      10.40.10.50:1409    N/A               Sr   Ss   EXTERNAL CLIENT
10.40.10.197:8080   172.25.101.72:2350  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
172.25.101.21:139   10.42.10.198:4215   00:23:7d:06:4e:7c Sr   Sso  EXTERNAL CLIENT
10.44.29.21:1026    172.25.101.21:3081  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.42.25.25:8014    172.25.101.47:1567  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER
10.40.10.197:8080   172.25.101.47:1573  00:23:7d:06:4e:7c SAsO SAr  EXTERNAL SERVER

Local IP:Port         Remote IP:Port        Peer ID           ConnType         
10.42.10.182:26755    172.25.101.24:139     N/A               PT In Progress   
172.25.101.22:10050   10.40.15.87:41566     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.10.31:1417      10.41.1.150:4569      N/A               PT In Progress   
10.42.10.27:65451     10.41.6.22:445        N/A               PT In Progress   
10.41.1.21:139        10.40.10.85:1153      N/A               PT No Peer       
172.30.101.116:4852   10.42.17.101:1494     N/A               PT In Progress   
10.41.1.22:1870       10.40.10.94:1433      N/A               PT No Peer       
10.40.10.197:8080     10.41.4.41:2006       N/A               PT No Peer       
10.40.10.197:8080     10.41.80.143:1863     N/A               PT No Peer       
10.41.22.35:139       10.41.80.143:1867     N/A               PT No Peer       
10.40.15.222:80       10.41.4.42:2138       N/A               PT No Peer       
172.25.101.68:3790    10.40.10.197:11801    N/A               PT App Cfg       
10.41.4.41:1998       10.40.10.197:8080     N/A               PT No Peer       
10.40.15.87:47493     10.41.11.21:10050     N/A               PT No Peer       
10.40.10.197:8080     10.41.7.142:2987      N/A               PT In Progress   
172.25.101.166:1530   192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.40.17.102:1494     172.25.101.175:3951   N/A               PT In Progress   
10.40.15.87:53532     10.41.80.21:10050     N/A               PT No Peer       
172.25.101.21:139     10.40.10.85:4681      N/A               PT In Progress   
172.25.101.52:1186    10.40.10.31:1417      N/A               PT In Progress   
10.42.17.101:1494     172.30.101.116:4852   N/A               PT In Progress   
172.25.101.160:1663   192.168.207.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.142:3102      192.168.207.15:44718  N/A               PT No Peer       
172.30.101.151:445    10.40.10.85:1050      N/A               PT No Peer       
10.40.15.87:44478     10.41.6.21:10050      N/A               PT No Peer       
10.41.4.22:10050      10.40.15.87:51065     N/A               PT No Peer       
172.30.101.151:10050  10.40.15.87:49696     N/A               PT No Peer       
172.30.101.56:3079    10.40.15.139:5061     N/A               PT In Progress   
10.41.1.150:1189      192.168.206.15:44718  N/A               PT No Peer       
10.40.15.87:51135     10.41.80.22:10050     N/A               PT No Peer       
199.105.179.227:8292  172.25.101.164:8278   N/A               PT In Progress   
10.40.17.107:1494     172.25.101.69:1273    00:23:7d:06:4e:7c PT Asymmetric    
10.41.22.35:445       10.41.80.143:1866     N/A               PT No Peer       
172.25.101.54:1741    10.40.10.197:8080     00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.56:3407    10.42.25.25:8014      00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.21:10050   10.40.15.87:46744     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.41.6.22:10050      10.40.15.87:60136     N/A               PT No Peer       
10.40.15.87:52517     10.41.80.22:10050     N/A               PT No Peer       
172.25.101.164:8277   199.105.179.20:8292   N/A               PT In Progress   
172.30.101.72:2856    10.40.15.139:5061     N/A               PT In Progress   
172.30.101.101:3369   10.40.10.197:8080     N/A               PT No Peer       
10.40.17.107:1494     172.25.101.59:4325    00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.87:50525     10.41.1.22:10050      N/A               PT No Peer       
10.41.4.41:2005       10.40.10.197:8080     N/A               PT No Peer       
10.40.10.31:1417      172.25.101.166:2831   N/A               PT In Progress   
172.25.101.166:2831   10.40.10.31:1417      N/A               PT In Progress   
172.25.101.69:2151    10.40.17.102:1494     00:23:7d:06:4e:7c PT Asymmetric    
172.30.101.110:2858   192.168.207.16:44718  N/A               PT No Peer       
10.41.7.21:10050      10.40.15.87:58747     N/A               PT No Peer       
10.40.10.31:1417      10.41.1.62:4122       N/A               PT In Progress   
172.25.101.160:1662   192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.7.21:10050      10.40.15.87:57793     N/A               PT No Peer       
192.168.207.15:44718  172.25.101.160:1663   00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.197:8080     172.30.101.114:2173   N/A               PT In Progress   
10.40.15.87:52823     10.41.80.22:10050     N/A               PT No Peer       
10.41.1.62:4122       10.40.10.31:1417      N/A               PT In Progress   
10.40.15.203:80       10.41.7.143:3701      N/A               PT In Progress   
10.40.17.102:1494     172.25.101.69:2151    00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.42:2139       10.40.15.222:80       N/A               PT No Peer       
172.25.101.41:1212    192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.31:1417      10.41.1.150:1933      N/A               PT In Progress   
10.41.6.22:4544       10.40.25.25:8014      N/A               PT In Progress   
10.41.6.21:445        10.42.10.198:4086     N/A               PT In Progress   
10.40.10.197:8080     10.41.80.143:1852     N/A               PT No Peer       
10.40.10.31:1417      10.41.1.52:3675       N/A               PT In Progress   
10.41.4.21:445        10.42.10.198:3924     N/A               PT In Progress   
10.40.15.203:80       10.41.1.62:1921       N/A               PT In Progress   
10.40.15.87:38582     10.41.7.22:10050      N/A               PT No Peer       
10.40.15.87:44797     10.41.6.21:10050      N/A               PT No Peer       
10.41.80.143:1864     10.40.10.197:8080     N/A               PT No Peer       
10.41.80.22:10050     10.40.15.87:52777     N/A               PT No Peer       
10.41.4.142:3101      192.168.206.15:44718  N/A               PT No Peer       
10.42.10.198:4086     10.41.6.21:445        N/A               PT In Progress   
10.40.15.87:50685     10.41.80.22:10050     N/A               PT No Peer       
10.40.10.31:1417      172.25.101.163:1769   N/A               PT In Progress   
10.40.10.31:1417      172.25.101.41:2181    N/A               PT In Progress   
192.168.207.16:44718  10.41.4.44:2728       N/A               PT No Peer       
172.25.101.41:2429    10.42.25.25:8014      00:23:7d:06:4e:7c PT Asymmetric    
10.41.22.32:139       10.41.80.45:2646      N/A               PT In Progress   
10.40.10.31:1417      172.30.101.51:2626    N/A               PT In Progress   
10.40.10.197:11801    172.25.101.68:3790    N/A               PT App Cfg       
10.40.10.31:1417      10.41.1.51:2973       N/A               PT In Progress   
10.40.15.87:38245     10.41.7.22:10050      N/A               PT No Peer       
10.41.4.49:1243       10.42.17.103:1494     N/A               PT In Progress   
10.40.15.87:52777     10.41.80.22:10050     N/A               PT No Peer       
10.40.15.87:57793     10.41.7.21:10050      N/A               PT No Peer       
10.40.10.31:1417      172.30.101.53:2960    N/A               PT In Progress   
10.40.34.74:445       172.25.101.166:4566   N/A               PT In Progress   
10.41.6.22:10050      10.40.15.87:32814     N/A               PT No Peer       
10.40.10.197:8080     172.25.101.54:1741    00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.87:57550     10.41.7.21:10050      N/A               PT No Peer       
10.40.10.31:1417      172.25.101.52:1181    N/A               PT In Progress   
172.30.101.51:2626    10.40.10.31:1417      N/A               PT In Progress   
10.41.1.150:1118      10.40.15.139:5061     N/A               PT In Progress   
10.42.25.25:8014      172.25.101.41:2429    00:23:7d:06:4e:7c PT Asymmetric    
10.42.17.103:1494     10.41.4.49:1243       N/A               PT In Progress   
172.25.101.61:1210    10.42.25.25:8014      00:23:7d:06:4e:7c PT Asymmetric    
10.41.7.142:2987      10.40.10.197:8080     N/A               PT In Progress   
10.40.10.85:1163      10.41.80.21:139       N/A               PT No Peer       
192.168.206.16:44718  172.30.101.110:2857   N/A               PT No Peer       
172.25.101.52:1181    10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1417      10.41.6.141:2816      N/A               PT In Progress   
10.41.1.52:4807       10.42.10.102:445      N/A               PT In Progress   
10.41.4.21:445        10.40.10.85:4666      N/A               PT In Progress   
10.41.7.143:3701      10.40.15.203:80       N/A               PT In Progress   
10.41.1.50:4545       10.40.17.107:1494     N/A               PT No Peer       
10.40.10.85:1153      10.41.1.21:139        N/A               PT No Peer       
10.41.80.143:1865     10.40.10.197:8080     N/A               PT No Peer       
10.41.4.21:445        10.40.10.85:1235      N/A               PT No Peer       
10.41.6.22:10050      10.40.15.87:59337     N/A               PT No Peer       
172.25.101.159:1189   192.168.207.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.170:4801   10.40.10.31:1417      N/A               PT In Progress   
172.25.101.21:10050   10.40.15.87:45074     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.41.80.142:1823     10.41.22.35:445       N/A               PT No Peer       
10.42.10.198:3882     10.41.11.21:445       N/A               PT In Progress   
10.41.80.21:445       10.42.10.27:65455     N/A               PT In Progress   
10.41.6.48:4629       10.40.10.102:1026     N/A               PT In Progress   
10.42.10.198:4049     10.41.83.21:445       N/A               PT In Progress   
10.41.1.50:3762       10.40.15.139:5061     N/A               PT In Progress   
10.40.25.25:8014      10.41.4.48:1436       N/A               PT In Progress   
10.40.17.107:1494     172.30.101.69:2720    N/A               PT In Progress   
10.40.10.31:1417      172.25.101.49:2416    N/A               PT In Progress   
172.25.101.62:2027    10.40.15.139:5061     N/A               PT In Progress   
10.41.1.21:445        10.42.10.198:4061     N/A               PT In Progress   
172.30.101.51:3091    10.40.10.31:1417      N/A               PT No Peer       
10.41.1.21:10050      10.40.15.87:53725     N/A               PT No Peer       
10.40.15.87:42827     10.41.6.21:10050      N/A               PT No Peer       
10.41.4.49:1242       10.40.17.102:1494     N/A               PT In Progress   
10.40.10.31:1417      10.41.1.150:4570      N/A               PT No Peer       
10.42.10.27:65455     10.41.80.21:445       N/A               PT In Progress   
10.41.1.62:1757       10.40.10.175:445      N/A               PT No Peer       
10.40.10.197:8080     10.41.7.142:2988      N/A               PT No Peer       
10.41.6.21:10050      10.40.15.87:44280     N/A               PT No Peer       
10.40.10.197:8080     10.41.1.55:3872       N/A               PT No Peer       
10.41.80.21:10050     10.40.15.87:53532     N/A               PT No Peer       
10.41.11.22:10050     10.40.15.87:50717     N/A               PT No Peer       
10.40.15.87:52520     10.41.1.21:10050      N/A               PT No Peer       
10.40.10.197:8080     10.41.1.55:3898       N/A               PT No Peer       
10.41.1.62:4085       192.168.201.153:443   N/A               PT In Progress   
10.40.15.87:51315     172.25.101.24:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
172.25.101.167:4018   10.40.10.31:1417      N/A               PT In Progress   
10.40.15.87:59367     10.41.6.22:10050      N/A               PT No Peer       
192.168.206.15:44718  172.25.101.166:1530   00:23:7d:06:4e:7c PT Asymmetric    
10.40.25.25:8014      172.25.101.180:3908   N/A               PT In Progress   
172.25.101.59:4325    10.40.17.107:1494     00:23:7d:06:4e:7c PT Asymmetric    
10.41.80.21:445       10.40.10.85:1156      N/A               PT No Peer       
172.30.101.151:445    10.42.10.198:3217     N/A               PT In Progress   
10.41.1.52:3675       10.40.10.31:1417      N/A               PT In Progress   
10.42.10.27:65460     172.25.101.22:445     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.25.25:8014      10.41.6.22:4544       N/A               PT In Progress   
172.25.101.54:1739    10.40.10.197:8080     00:23:7d:06:4e:7c PT Asymmetric    
10.41.6.22:10050      10.40.15.87:59367     N/A               PT No Peer       
172.30.101.151:10050  10.40.15.87:49145     N/A               PT No Peer       
10.40.15.139:5061     172.25.101.163:1056   N/A               PT In Progress   
172.30.101.53:3128    10.40.10.31:1417      N/A               PT No Peer       
10.41.80.22:10050     10.40.15.87:50660     N/A               PT No Peer       
10.41.4.49:2010       10.41.22.35:139       N/A               PT In Progress   
172.25.101.24:10050   10.40.15.87:51107     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
192.168.206.16:44718  172.25.101.69:1412    00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.21:3118    10.44.9.21:1025       00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.197:8080     10.41.80.143:1870     N/A               PT No Peer       
10.40.15.87:10051     10.41.6.21:3959       N/A               PT No Peer       
10.40.10.102:1026     172.25.101.21:3004    N/A               PT In Progress   
10.41.1.62:4084       192.168.201.153:443   N/A               PT In Progress   
10.40.10.197:8080     172.25.101.47:1570    00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.87:53725     10.41.1.21:10050      N/A               PT No Peer       
10.40.10.85:1236      10.41.4.21:139        N/A               PT No Peer       
10.40.15.87:37488     10.41.7.22:10050      N/A               PT No Peer       
10.40.10.31:1417      10.41.4.142:4230      N/A               PT In Progress   
10.40.15.139:5061     10.41.1.57:4427       N/A               PT In Progress   
10.41.11.22:10050     10.40.15.87:49203     N/A               PT No Peer       
10.40.15.87:46735     10.41.11.21:10050     N/A               PT No Peer       
10.41.80.143:1870     10.40.10.197:8080     N/A               PT No Peer       
10.40.10.197:8080     172.30.101.53:3127    N/A               PT No Peer       
172.30.101.69:4050    10.40.10.31:1417      N/A               PT In Progress   
10.41.1.42:3541       192.168.201.153:443   N/A               PT In Progress   
10.41.7.146:2596      10.40.10.31:1417      N/A               PT In Progress   
172.30.101.101:3368   10.40.10.197:8080     N/A               PT No Peer       
10.42.10.198:3217     172.30.101.151:445    N/A               PT In Progress   
10.40.10.85:1068      10.41.6.21:445        N/A               PT In Progress   
10.40.15.87:54352     172.30.101.152:10050  N/A               PT No Peer       
10.40.15.139:5061     10.41.4.41:3772       N/A               PT In Progress   
10.42.10.197:8080     172.30.101.69:4074    N/A               PT No Peer       
172.25.101.164:2829   192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.1.22:10050      10.40.15.87:51195     N/A               PT No Peer       
10.42.10.102:445      10.41.1.52:4807       N/A               PT In Progress   
10.40.10.103:1026     10.41.1.42:3850       N/A               PT In Progress   
10.40.10.103:1026     10.41.1.62:4281       N/A               PT In Progress   
172.25.101.156:4804   10.40.15.139:5061     N/A               PT In Progress   
10.40.10.85:1156      10.41.80.21:445       N/A               PT No Peer       
172.25.101.166:1531   192.168.207.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.31:1417      172.30.101.116:1322   N/A               PT In Progress   
192.168.201.153:443   10.41.1.62:4084       N/A               PT In Progress   
172.25.101.42:1104    10.40.10.102:1026     N/A               PT In Progress   
10.40.17.107:1494     10.41.1.50:4545       N/A               PT No Peer       
10.40.10.85:1050      172.30.101.151:445    N/A               PT No Peer       
10.40.15.87:50601     10.41.11.22:10050     N/A               PT No Peer       
10.41.1.60:4515       10.40.10.31:1382      N/A               PT In Progress   
10.40.15.87:50717     10.41.11.22:10050     N/A               PT No Peer       
172.30.101.71:1303    192.168.206.15:44718  N/A               PT No Peer       
10.41.80.43:4121      10.42.25.25:8014      N/A               PT In Progress   
10.40.10.31:1417      10.41.7.44:1512       N/A               PT In Progress   
172.30.101.116:1322   10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1382      10.41.1.42:3554       N/A               PT In Progress   
10.40.15.87:45429     172.25.101.21:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.10.85:4666      10.41.4.21:445        N/A               PT In Progress   
10.42.25.25:8014      172.25.101.56:3407    00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.197:8080     10.41.80.143:1871     N/A               PT No Peer       
10.40.10.197:8080     10.41.4.41:1998       N/A               PT No Peer       
172.25.101.49:2416    10.40.10.31:1417      N/A               PT In Progress   
10.40.15.222:80       10.41.4.42:2139       N/A               PT No Peer       
10.41.7.44:1512       10.40.10.31:1417      N/A               PT In Progress   
10.40.15.87:49145     172.30.101.151:10050  N/A               PT No Peer       
172.25.101.156:3452   10.40.10.197:8080     N/A               PT In Progress   
10.41.1.51:2973       10.40.10.31:1417      N/A               PT In Progress   
10.40.15.87:50660     10.41.80.22:10050     N/A               PT No Peer       
172.25.101.52:1189    10.40.15.156:80       00:23:7d:06:4e:7c PT Asymmetric    
172.30.101.53:3129    10.40.10.197:8080     N/A               PT No Peer       
172.25.101.62:3076    10.40.10.31:1417      N/A               PT In Progress   
10.40.25.25:8014      10.41.7.143:3655      N/A               PT In Progress   
10.41.83.21:139       10.40.10.85:1223      N/A               PT No Peer       
10.40.15.87:60387     10.41.6.22:10050      N/A               PT No Peer       
10.42.10.198:3954     10.41.7.21:445        N/A               PT In Progress   
172.25.101.41:2181    10.40.10.31:1417      N/A               PT In Progress   
10.41.1.142:2784      10.40.25.25:8014      N/A               PT No Peer       
10.44.62.21:2644      172.25.101.24:139     N/A               PT In Progress   
172.30.101.72:4720    10.40.25.25:8014      N/A               PT In Progress   
10.41.1.62:1921       10.40.15.203:80       N/A               PT In Progress   
172.25.101.168:1071   10.40.15.139:5061     N/A               PT In Progress   
10.41.80.143:1849     10.40.10.197:8080     N/A               PT No Peer       
172.30.101.151:10050  10.40.15.87:48082     N/A               PT No Peer       
10.40.10.31:1417      172.30.101.78:2812    N/A               PT In Progress   
10.40.10.31:1417      10.41.6.48:4329       N/A               PT In Progress   
172.25.101.151:1214   192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.47:1570    10.40.10.197:8080     00:23:7d:06:4e:7c PT Asymmetric    
10.40.17.107:1494     172.25.101.47:4625    00:23:7d:06:4e:7c PT Asymmetric    
10.41.80.21:10050     10.40.15.87:53558     N/A               PT No Peer       
10.40.15.87:51065     10.41.4.22:10050      N/A               PT No Peer       
10.40.25.25:8014      10.41.1.142:2784      N/A               PT No Peer       
10.41.7.142:2989      10.40.10.197:8080     N/A               PT No Peer       
10.40.10.197:8080     172.30.101.53:3129    N/A               PT No Peer       
10.40.15.87:41566     172.25.101.22:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.41.80.22:10050     10.40.15.87:51135     N/A               PT No Peer       
10.41.1.22:10050      10.40.15.87:50525     N/A               PT No Peer       
10.40.15.87:60136     10.41.6.22:10050      N/A               PT No Peer       
10.41.7.142:2316      10.40.17.102:1494     N/A               PT No Peer       
10.40.10.31:1417      10.41.7.146:2596      N/A               PT In Progress   
10.40.10.197:8080     10.41.4.41:2005       N/A               PT No Peer       
172.30.101.53:2960    10.40.10.31:1417      N/A               PT In Progress   
10.40.10.31:1417      172.30.101.51:3091    N/A               PT No Peer       
10.42.17.101:1494     10.41.1.51:2132       N/A               PT No Peer       
10.40.10.197:8080     172.25.101.54:1739    00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.41:3772       10.40.15.139:5061     N/A               PT In Progress   
10.41.7.21:10050      10.40.15.87:57550     N/A               PT No Peer       
10.41.6.141:2816      10.40.10.31:1417      N/A               PT In Progress   
10.41.7.21:10050      10.40.15.87:57780     N/A               PT No Peer       
10.40.10.102:1026     172.25.101.42:1104    N/A               PT In Progress   
10.40.10.197:8080     172.30.101.101:3369   N/A               PT No Peer       
192.168.207.15:44718  172.25.101.151:1215   00:23:7d:06:4e:7c PT Asymmetric    
10.41.80.21:10050     10.40.15.87:53311     N/A               PT No Peer       
10.42.10.198:3922     10.41.80.21:139       N/A               PT In Progress   
192.168.206.15:44718  172.25.101.159:1187   00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.31:1417      10.41.1.143:1276      N/A               PT In Progress   
10.41.1.55:3872       10.40.10.197:8080     N/A               PT No Peer       
192.168.201.153:443   10.41.1.62:4085       N/A               PT In Progress   
10.42.10.197:3926     172.30.101.152:2967   N/A               PT No Peer       
10.41.1.145:2676      10.40.17.107:1494     N/A               PT In Progress   
172.30.101.114:2173   10.40.10.197:8080     N/A               PT In Progress   
172.25.101.54:1738    10.40.10.197:8080     00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.69:1413    192.168.207.16:44718  00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.21:10050   10.40.15.87:45429     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.41.1.142:2785      10.40.25.25:8014      N/A               PT No Peer       
10.40.15.139:5061     10.41.6.150:1581      N/A               PT In Progress   
172.25.101.21:445     10.40.32.128:3640     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.41.7.21:10050      10.40.15.87:60329     N/A               PT No Peer       
10.40.15.87:52288     172.30.101.152:10050  N/A               PT No Peer       
10.41.11.21:10050     10.40.15.87:47493     N/A               PT No Peer       
10.41.80.22:10050     10.40.15.87:50685     N/A               PT No Peer       
10.40.15.139:5061     172.25.101.168:1071   N/A               PT In Progress   
172.30.101.152:10050  10.40.15.87:52288     N/A               PT No Peer       
10.41.83.21:445       10.42.10.198:4049     N/A               PT In Progress   
10.41.80.143:1853     10.40.10.197:8080     N/A               PT No Peer       
10.40.15.87:51195     10.41.1.22:10050      N/A               PT No Peer       
10.41.6.21:10050      10.40.15.87:44478     N/A               PT No Peer       
10.41.6.21:10050      10.40.15.87:42675     N/A               PT No Peer       
192.168.207.15:44718  172.25.101.166:1531   00:23:7d:06:4e:7c PT Asymmetric    
10.41.6.48:4330       10.40.10.31:1417      N/A               PT In Progress   
10.41.1.150:4569      10.40.10.31:1417      N/A               PT In Progress   
10.41.7.42:3974       10.40.15.139:5061     N/A               PT In Progress   
10.40.15.87:59337     10.41.6.22:10050      N/A               PT No Peer       
10.40.10.197:8080     10.41.80.143:1853     N/A               PT No Peer       
10.40.10.102:1026     10.41.6.48:4629       N/A               PT In Progress   
10.40.10.197:8080     172.25.101.46:1860    N/A               PT In Progress   
172.25.101.69:1412    192.168.206.16:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.6.22:10050      10.40.15.87:60815     N/A               PT No Peer       
10.41.4.44:2728       192.168.207.16:44718  N/A               PT No Peer       
10.40.10.197:8080     10.41.80.143:1862     N/A               PT No Peer       
192.168.206.15:44718  172.25.101.164:2829   00:23:7d:06:4e:7c PT Asymmetric    
10.41.7.22:10050      10.40.15.87:38245     N/A               PT No Peer       
10.40.10.102:1026     172.25.101.21:3120    00:23:7d:06:4e:7c PT Asymmetric    
10.42.10.198:4061     10.41.1.21:445        N/A               PT In Progress   
10.41.1.60:2750       10.40.10.31:1417      N/A               PT In Progress   
10.41.4.47:4733       10.40.17.107:1494     N/A               PT No Peer       
10.41.80.45:2646      10.41.22.32:139       N/A               PT In Progress   
192.168.201.153:443   10.41.1.42:3541       N/A               PT In Progress   
172.25.101.21:3004    10.40.10.102:1026     N/A               PT In Progress   
10.40.15.87:47815     172.30.101.151:10050  N/A               PT No Peer       
10.41.11.21:445       10.40.10.85:4913      N/A               PT In Progress   
172.30.101.101:3367   10.40.10.197:8080     N/A               PT No Peer       
10.40.15.87:47834     10.41.4.21:10050      N/A               PT No Peer       
10.40.10.85:1235      10.41.4.21:445        N/A               PT No Peer       
10.41.4.21:10050      10.40.15.87:49525     N/A               PT No Peer       
10.41.7.142:2988      10.40.10.197:8080     N/A               PT No Peer       
10.40.15.87:49725     10.41.11.22:10050     N/A               PT No Peer       
10.40.15.156:80       172.25.101.52:1188    00:23:7d:06:4e:7c PT Asymmetric    
10.44.9.21:1025       172.25.101.21:2999    N/A               PT In Progress   
172.30.101.69:4074    10.42.10.197:8080     N/A               PT No Peer       
10.41.80.22:10050     10.40.15.87:52823     N/A               PT No Peer       
192.168.206.15:44718  10.41.4.142:3101      N/A               PT No Peer       
10.41.1.50:4540       10.42.17.101:1494     N/A               PT No Peer       
10.41.1.143:1276      10.40.10.31:1417      N/A               PT In Progress   
10.41.80.143:1867     10.41.22.35:139       N/A               PT No Peer       
10.40.15.87:48709     10.41.4.22:10050      N/A               PT No Peer       
10.40.15.87:52295     10.41.80.21:10050     N/A               PT No Peer       
10.41.80.22:10050     10.40.15.87:50424     N/A               PT No Peer       
10.40.10.31:1417      172.25.101.170:4801   N/A               PT In Progress   
10.40.10.31:1382      10.41.1.62:4072       N/A               PT In Progress   
172.25.101.42:2643    10.40.10.49:443       00:23:7d:06:4e:7c PT Asymmetric    
10.41.6.21:10050      10.40.15.87:42827     N/A               PT No Peer       
10.41.1.42:3554       10.40.10.31:1382      N/A               PT In Progress   
10.41.1.42:3850       10.40.10.103:1026     N/A               PT In Progress   
10.40.32.128:3641     172.25.101.21:139     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.15.87:46474     10.41.11.21:10050     N/A               PT No Peer       
10.40.10.31:1417      10.41.1.60:2750       N/A               PT In Progress   
10.41.22.35:139       10.41.80.143:1839     N/A               PT No Peer       
10.40.15.139:5061     10.41.7.42:3974       N/A               PT In Progress   
172.25.101.47:1569    10.40.10.197:8080     00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.41:1999       10.40.10.197:8080     N/A               PT No Peer       
10.40.10.85:4681      172.25.101.21:139     N/A               PT In Progress   
10.41.80.143:1852     10.40.10.197:8080     N/A               PT No Peer       
172.30.101.101:1451   10.40.15.139:5061     N/A               PT In Progress   
10.40.25.25:8014      10.41.1.142:2761      N/A               PT In Progress   
10.41.1.62:4072       10.40.10.31:1382      N/A               PT In Progress   
10.40.17.102:1494     10.41.4.49:1242       N/A               PT In Progress   
10.41.11.22:10050     10.40.15.87:49725     N/A               PT No Peer       
10.40.10.175:445      10.41.1.62:1757       N/A               PT No Peer       
10.41.80.21:10050     10.40.15.87:52295     N/A               PT No Peer       
172.25.101.22:139     10.42.10.27:65461     00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.10.31:1417      172.25.101.162:2647   00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.87:45074     172.25.101.21:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
172.25.101.163:1056   10.40.15.139:5061     N/A               PT In Progress   
10.41.1.21:445        10.40.10.85:1146      N/A               PT No Peer       
172.25.101.180:3908   10.40.25.25:8014      N/A               PT In Progress   
10.40.10.31:1417      172.30.101.116:1318   N/A               PT In Progress   
10.40.10.197:8080     172.25.101.156:3452   N/A               PT In Progress   
10.41.4.22:10050      10.40.15.87:48709     N/A               PT No Peer       
10.41.80.143:1861     10.40.10.197:8080     N/A               PT No Peer       
10.42.10.67:5242      10.41.1.52:4809       N/A               PT In Progress   
172.25.101.175:3951   10.40.17.102:1494     N/A               PT In Progress   
172.30.101.152:2967   10.42.10.197:3926     N/A               PT No Peer       
10.41.6.22:445        10.42.10.27:65451     N/A               PT In Progress   
172.30.101.116:1318   10.40.10.31:1417      N/A               PT In Progress   
172.25.101.56:3401    10.40.10.31:135       00:23:7d:06:4e:7c PT Asymmetric    
10.40.10.197:8080     10.41.80.143:1859     N/A               PT No Peer       
10.41.80.143:1866     10.41.22.35:445       N/A               PT No Peer       
10.40.10.31:135       172.25.101.56:3401    00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.56:3387    10.40.10.31:1417      N/A               PT In Progress   
172.25.101.164:2830   192.168.207.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.139:5061     172.25.101.62:2027    N/A               PT In Progress   
10.41.11.21:10050     10.40.15.87:46735     N/A               PT No Peer       
10.40.10.31:1417      172.25.101.56:3387    N/A               PT In Progress   
10.41.4.44:2727       192.168.206.16:44718  N/A               PT No Peer       
10.41.1.51:2132       10.42.17.101:1494     N/A               PT No Peer       
10.40.10.197:8080     10.41.6.150:3837      N/A               PT No Peer       
10.40.10.49:80        172.25.101.42:2641    00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.159:1187   192.168.206.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.48:1436       10.40.25.25:8014      N/A               PT In Progress   
10.44.9.21:1025       172.25.101.21:3118    00:23:7d:06:4e:7c PT Asymmetric    
10.40.15.139:5061     172.30.101.101:1451   N/A               PT In Progress   
172.25.101.62:3091    10.40.10.31:1417      00:23:7d:06:4e:7c PT Asymmetric    
10.41.7.21:10050      10.40.15.87:58803     N/A               PT No Peer       
192.168.206.16:44718  10.41.4.44:2727       N/A               PT No Peer       
10.40.17.107:1494     10.41.4.47:4733       N/A               PT No Peer       
10.41.80.143:1863     10.40.10.197:8080     N/A               PT No Peer       
10.41.1.62:4281       10.40.10.103:1026     N/A               PT In Progress   
172.25.101.21:3120    10.40.10.102:1026     00:23:7d:06:4e:7c PT Asymmetric    
172.25.101.151:1215   192.168.207.15:44718  00:23:7d:06:4e:7c PT Asymmetric    
10.41.4.41:2006       10.40.10.197:8080     N/A               PT No Peer       
10.40.15.87:46744     172.25.101.21:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr
10.40.15.87:53311     10.41.80.21:10050     N/A               PT No Peer       
10.41.7.143:3655      10.40.25.25:8014      N/A               PT In Progress   
10.41.7.21:445        10.40.10.85:4383      N/A               PT In Progress   
10.40.15.87:51534     172.25.101.24:10050   00:23:7d:06:4e:7c PT Peer AOIM Sync in Pr

WAE-DC-CORE#sh statistics filtering
Number of filtering tuples:                             328
Number of filtering tuple collisions:                   0
Packets dropped due to filtering tuple collisions:      0
Number of transparent packets locally delivered:        4317
Number of transparent packets dropped:                  0
Packets dropped due to ttl expiry:                      0
Packets dropped due to bad route:                       9
Syn packets dropped with our own id in the options:     0
Internal client syn packets dropped:                    0
Syn packets received and dropped on estab. conn:        0
Syn-Ack packets received and dropped on estab. conn:    120
Syn packets dropped due to peer connection alive:       0
Syn-Ack packets dropped due to peer connection alive:   0
Packets recvd on in progress conn. and not handled:     0
Packets dropped due to peer connection alive:           0
Packets dropped due to invalid TCP flags:               0
Packets dropped by FB packet input notifier:            0
Packets dropped by FB packet output notifier:           0
Number of errors by FB tuple create notifier:           0
Number of errors by FB tuple delete notifier:           0
Dropped WCCP GRE packets due to invalid WCCP service:   0
Dropped WCCP L2 packets due to invalid WCCP service:    0
Number of deleted tuple refresh events:                 0
Number of times valid tuples found on refresh list:     0
WAE-DC-CORE#sh statistics filtering
Number of filtering tuples:                             342
Number of filtering tuple collisions:                   0
Packets dropped due to filtering tuple collisions:      0
Number of transparent packets locally delivered:        4317
Number of transparent packets dropped:                  0
Packets dropped due to ttl expiry:                      0
Packets dropped due to bad route:                       9
Syn packets dropped with our own id in the options:     0
Internal client syn packets dropped:                    0
Syn packets received and dropped on estab. conn:        0
Syn-Ack packets received and dropped on estab. conn:    120
Syn packets dropped due to peer connection alive:       0
Syn-Ack packets dropped due to peer connection alive:   0
Packets recvd on in progress conn. and not handled:     0
Packets dropped due to peer connection alive:           0
Packets dropped due to invalid TCP flags:               0
Packets dropped by FB packet input notifier:            0
Packets dropped by FB packet output notifier:           0
Number of errors by FB tuple create notifier:           0
Number of errors by FB tuple delete notifier:           0
Dropped WCCP GRE packets due to invalid WCCP service:   0
Dropped WCCP L2 packets due to invalid WCCP service:    0
Number of deleted tuple refresh events:                 0
Number of times valid tuples found on refresh list:     0
WAE-DC-CORE#sh statistics filtering
Number of filtering tuples:                             336
Number of filtering tuple collisions:                   0
Packets dropped due to filtering tuple collisions:      0
Number of transparent packets locally delivered:        4325
Number of transparent packets dropped:                  0
Packets dropped due to ttl expiry:                      0
Packets dropped due to bad route:                       9
Syn packets dropped with our own id in the options:     0
Internal client syn packets dropped:                    0
Syn packets received and dropped on estab. conn:        0
Syn-Ack packets received and dropped on estab. conn:    120
Syn packets dropped due to peer connection alive:       0
Syn-Ack packets dropped due to peer connection alive:   0
Packets recvd on in progress conn. and not handled:     0
Packets dropped due to peer connection alive:           0
Packets dropped due to invalid TCP flags:               0
Packets dropped by FB packet input notifier:            0
Packets dropped by FB packet output notifier:           0
Number of errors by FB tuple create notifier:           0
Number of errors by FB tuple delete notifier:           0
Dropped WCCP GRE packets due to invalid WCCP service:   0
Dropped WCCP L2 packets due to invalid WCCP service:    0
Number of deleted tuple refresh events:                 0
Number of times valid tuples found on refresh list:     0

REMOTE SITE#sh statistics filtering
Number of filtering tuples:                             70
Number of filtering tuple collisions:                   0
Packets dropped due to filtering tuple collisions:      0
Number of transparent packets locally delivered:        855
Number of transparent packets dropped:                  0
Packets dropped due to ttl expiry:                      0
Packets dropped due to bad route:                       0
Syn packets dropped with our own id in the options:     0
Internal client syn packets dropped:                    0
Syn packets received and dropped on estab. conn:        0
Syn-Ack packets received and dropped on estab. conn:    137
Syn packets dropped due to peer connection alive:       0
Syn-Ack packets dropped due to peer connection alive:   0
Packets recvd on in progress conn. and not handled:     0
Packets dropped due to peer connection alive:           0
Packets dropped due to invalid TCP flags:               0
Packets dropped by FB packet input notifier:            0
Packets dropped by FB packet output notifier:           0
Number of errors by FB tuple create notifier:           0
Number of errors by FB tuple delete notifier:           0
Dropped WCCP GRE packets due to invalid WCCP service:   0
Dropped WCCP L2 packets due to invalid WCCP service:    0
Number of deleted tuple refresh events:                 0
Number of times valid tuples found on refresh list:     0
REMOTE SITE#sh statistics filtering
Number of filtering tuples:                             64
Number of filtering tuple collisions:                   0
Packets dropped due to filtering tuple collisions:      0
Number of transparent packets locally delivered:        855
Number of transparent packets dropped:                  0
Packets dropped due to ttl expiry:                      0
Packets dropped due to bad route:                       0
Syn packets dropped with our own id in the options:     0
Internal client syn packets dropped:                    0
Syn packets received and dropped on estab. conn:        0
Syn-Ack packets received and dropped on estab. conn:    137
Syn packets dropped due to peer connection alive:       0
Syn-Ack packets dropped due to peer connection alive:   0
Packets recvd on in progress conn. and not handled:     0
Packets dropped due to peer connection alive:           0
Packets dropped due to invalid TCP flags:               0
Packets dropped by FB packet input notifier:            0
Packets dropped by FB packet output notifier:           0
Number of errors by FB tuple create notifier:           0
Number of errors by FB tuple delete notifier:           0
Dropped WCCP GRE packets due to invalid WCCP service:   0
Dropped WCCP L2 packets due to invalid WCCP service:    0
Number of deleted tuple refresh events:                 0
Number of times valid tuples found on refresh list:     0

Hi Fabio,

Based on the topology diagram you provided, it's very likely that the PIX firewalls sitting in the optimized path are preventing the connections from being optimized.  The PIX/ASA 7.2.3 release added support for integration with Cisco WAAS.  I have attached a document that details the solution and configuration for this feature.

Please review this document and feel free to post any additional questions to this forum.

Regards,

Zach

Hi Zach;

I will do the upgrade of the firewalls and after it I will post a new status.

Thanks by help and reply.

Regards;

Fabio

lloyd_andrew
Level 1
Level 1

Are they at least PIX 515s?? If so, do yourself a favor and upgrade to 7.2(3). I just went through this with a customer who had a PIX 501 on one end with 6.3(5) and a VPN concentrator on the other end. We suspected that since the LANs were part of nat (0) on the PIX, the traffic would pass through. However, when I enabled traffic interception, weird behavior would occur. The Central Manager would lose connectivity to the edge, client connections would drop. We upgraded to 7.2(3), configured the WAAS inspection and saw immediate positive results.

Different Cisco SEs have told me that the fix is to basically turn off stateful inspection on the PIX but the only way to do that is with the "nailed" keyword on a static nat translation. Problem here is that that keyword first became available in 7.0 code.

HTH!

Please rate if the post was helpful.

-Lloyd

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: