outboud traffic session in reply are not allowed

Unanswered Question
Jan 14th, 2008
User Badges:

Hi all,

I have a problem with an ASA5505. Let's say I have LAN1 ( and LAN2 (

Machines in the LAN1 have the ASA( as the Default Gateway and a second router( connect the LAN1 to the LAN2. On the ASA device I have, of course, a static route to the for the LAN2 network.

When a session beging from LAN1 to LAN2 everything is fine. When a session begin from LAN2 to LAN1 the ASA blocks the traffic in response.. No access-lists are applied on the inside interface and the same-security-traffic permit intra-interface is present (also tried with and without nat-control). Does anybody know how to work out the problem?

Thanks 4 your help.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ANDREA GELATI Mon, 01/14/2008 - 05:36
User Badges:

I have to add just a few things.. unluckily I can't add static routes on the machines in LAN1 nor change the Default Gateway. Basically I can only change the configuration on the ASA device.

That's all.



This Discussion