Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Pix syslog message

106012: Deny IP from 192.168.1.1 to x.x.x.x, IP options: "0x14". I receive this syslog message about 6000 times per hour from our Pix. This is from SAP frontend clients logging on and sending packets to SAP R/3 servers. Does anyone have any idea or do I need to talk to SAP about their code?

Thanks,

RJ

  • Other Security Subjects
1 REPLY
Cisco Employee

Re: Pix syslog message

The PIX drops packets with any IP options set since they're seen as a security risk. There's no way around this. You need to talk to the SAP people to see why they're setting options in the packets.

90
Views
0
Helpful
1
Replies
This widget could not be displayed.