San Antonio, TX
|reply to RyanG1 |
Re: ASA vs ZBFW
So just to come full circle on this... i figured out what was going on.
the router is not tracking the connections properly and anything that was coming back was being denied (but not logged as a deny!)... i figured the only thing i had not done was bump to a higher rev IOS... that did the trick. All consoles now report as open connectivity and ZBFW is processing the traffic just as the ASA does (cpu load is decreased now as well when maxing out my internet download).... i could not find any bugs on this at all from any source.....
went from c890-universalk9-mz.152-2.T1 to c890-universalk9-mz.152-3.T
i should have tried that first but whatever... i hope this helps someone else in the future =)
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so. -Douglas Adams