The flag RST is the reset flag. It is used when one participant in a TCP connection wants to immediately stop the connection. Normal termination of TCP connections use the FIN and FIN/ACK exchange to gracefully terminate the connection. The RST is used to abruptly terminate (frequently in response to some error condition).
The flag PSH is to indicate push. It is an indicator that the segment must be sent quckly (rather than waiting for additional data which could result in a more efficient larger segment).
I am seeing a lot of these messages from clients that are in the DHCP scope of our AnyConnect clients to many of our VMWare clients. Would there be any reason specifically for this that relates to how VMWare handles TCP? I am wondering if it's related to the fact that our VMWare server uses a bunch of physical NICs tied together as a port-channel. Alternatively is there a way to disable this rule for "trusted" or specific source VLANs?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...