VPN remote access user errors

[WILLIAM STEGMAN]

I'm receiving the error below in my ASA logs for users connected to remote access VPN. I have a couple of site to site tunnels configured on the ASA as well. The error appears more for some users than others, but has appeared for every user that has so far connected via remote access VPN. It doesn't seem to affect their connection, but of course I was hoping to find out what is happening.

4 Jan 19 2007 16:05:12 402119 24.239.108.25 61.282.187.140 IPSEC: Received an ESP packet (SPI= 0x3AE53F8D, sequence number= 0xD12) from 24.239.108.25 (user= ballb) to 61.282.187.140 that failed anti-replay checking.

[5220]

Hi,

Probably this is only a retransmission, and since ASA got the first packet will discard this as is not the correct sequence number.

I wouldn't worry about this if it only happens from time to time.

Please rate if this helped.

Regards,

Daniel

[WILLIAM STEGMAN]

it only happens once in a while for all the users, but so far has happened consistently, i get dozens of events one after the other, for one particular user. i'm using aes-256.