cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7659
Views
5
Helpful
4
Replies

ASA sending RST packet

stephen.baugh
Level 1
Level 1

Hi,

Don't if im being really dumb, but ive got an ASA setup as VPN concentrator. Which works fine, my issue is that the ASA is sending a RST/ACK packet back to a host when it's dropped by an ACL.

Has anyone come accross this ?

1 Accepted Solution

Accepted Solutions

Hi Stephen

,

By default "service resetoutbound" is enabled for all interfaces on the firewall. This command is used to enable resets for denied TCP connections. You can disbale this by entering the following command in the config mode:

no service resetoutbound

More information can be found here:

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html#wp1290652

HTH

Ashu

View solution in original post

4 Replies 4

Hi,

Is the ASA doing TCP intercept for the inside hosts?

Federico.

ive not defined any tcp intercept parameters

Hi Stephen

,

By default "service resetoutbound" is enabled for all interfaces on the firewall. This command is used to enable resets for denied TCP connections. You can disbale this by entering the following command in the config mode:

no service resetoutbound

More information can be found here:

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html#wp1290652

HTH

Ashu

Many thanks

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card