01-03-2012 09:08 AM
Hello,
Anyone ever seen this?
%ASA-4-419002: Duplicate TCP SYN from inside:10.%.%.%/3283 to inside:10.%.%.%/3283 with different initial sequence number
We are getting incredible amounts of these alerts at first I thought it was some kind of attack. The alerts come from any number of source/destination IP's differetnt ports also.