My client has a 4402 controller that seems to be the source of a TCP request on port 2006.
Their edge router is blocking the communication with an acl.
Here is two entries from the router log:
Apr 26 16:30:55: %SEC-6-IPACCESSLOGP: list from-inside denied tcp 192.168.1.5(2006) -> 184.108.40.206(64344), 3 packets
Apr 26 16:32:55: %SEC-6-IPACCESSLOGP: list from-college denied tcp 192.168.1.5(2006) -> 220.127.116.11(42315), 6 packets
192.168.1.5 is the management interface on the controller.
The destination is not always the same.
Any thoughts would be helpful.