Late response from CSM for TCP SYN_ACK

Unanswered Question
Sep 29th, 2009


I have configured CSM to redirect one of our website to different URL. It works fine for 3 - 4 time and after that it stops working. When I check on our internet facing firewall, noticed that getting an error message saying

"First packet isn't syn tcp_flags:syn-ack"

When I did google and noticied that CSM takes time to reply for SYN request. That is the reason firewall block that traffic due to time out.

Posted: Tue Sep 29, 2009 1:09 pm Post subject: NOKIA Firewall Block URL redirect



I am using the NOKIA firewall which is facing the internet. Behind that I have Cisco CSM and it is configured for website redirect as below

serverfarm HTTP_REDIRECT

nat server

no nat client

redirect-vserver HTTP_REDIR

webhost relocation 301


vserver WEB-RD

virtual tcp www

serverfarm HTTP_REDIRECT

persistent rebalance


Please help me to fix this issue.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mahendra.raj Wed, 09/30/2009 - 20:57

Hi All

Has any one got a chance to have a look on this? Any advice please..?




This Discussion