Could it be a fragmentation error ? Or just a bug ? I searched through the bug toolkit and found lots of bugs in the 6.2(2) software. A lot of the bugs where fixed in version 6.2(3), but that is not avaliable for download......
Re: Citrix ICA traffic through VPN between PIX 501 and 3005 conc
Bug CSCdr48890 does talk of problems arising when using Citrix in conjunction with the VPN 3000 client. (Also refer to bug CSCdr63713). The workaround was to set mtu to less than 1400 which you seem to have done already. The first thing you need to do then is to figure out is if the problem is observed only with user-citrix connections accross the tunnel or for all kinds of traffic. It would also be a good idea to observe the user-citrix connections while traffic is not being tunneled accross. This will mean a lot of work and you also need to be sure about the impact that might have on your security, but this would help you figure out if the problem has anything to do with your VPN. If the problem is with the VPN connectivity, the only possible reason that I can think of is that the numbers of users behind your 501, exceed the licence you have purchased.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...