Logging half-open conections to blocked Windows ports
Wouldnt you be essentially looking for connection "Teardown" messages with reason SYN Timeout? As this should be the result if either the ASA doesnt seen the return SYN ACK or the last ACK from the connection initiator? This would usually be generated after 20-30 seconds if the connection doesnt form.
I am not really sure about the UDP. Rarely have to troubleshoot UDP connections. The very rare cases usually relate to Video/Voice and in there I usually see ICMP messages returned for a port that the destination device is not listening on. And while troubleshooting these I tend to take captures on the actual ASA.
Think the Teardown Syslog ID for TCP connections is ASA-6-302013
This is usually the first Syslog ID I look for from the server when someone reports a problem with connectivity.
By default its a Informational level log message or naturally it can be changed to something else if your logging is for example set to Notifications.
Heres the link to the Cisco document about this log message
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...