I have a topology where an ASA is the default gateway for the network.
There is a network the ASA knows by other router in the inside network.
Then when a host want to reach this network and goes to ASA as it is host's default gateway the ASA send the traffic comming from inside to a router also in inside.
When the traffic comes back from destination it comes from WAN to this router (the one ASA sent traffic to) and this router send it direct to the host. Not to ASA because this router already knows this host locally.
Then as ASA sees a TCP/SYN going to destination but does not sees TCP/SYN/ACK coming back it sent a TCP/RST to the destination.
How can I prevent it?
I'm using version 8.X, already tried to disable threat-detection basic....