We moved our office to a different location (including our dsl conncetion). We also updated our asa from 8.0.3 to 8.0.4.
Since then, I'm having trouble opening the webportal from customers having a dedicated line.
I'm getting the certificate, can confirm it but the page won't load. When setting down the MTU size on the client everything works fine. Using a DSL or UMTS Line also works like a charm.
mtu inside 1500
mtu outside 1492
sysopt connection tcpmss 1452
crypto ipsec df-bit clear-df inside
crypto ipsec df-bit clear-df outside
i also attached an packet trace showing tcp checksum errors while loading the page.
Anybody has an idea?