said by krw17:he other thing you might try is turning off sequence randomization.
as a resolution to this -- i finally have it working.
chalk it up to user error on the tcp-state-bypass.
fired up the asa and still getting logs indicating lack of tcp connection state. ok. why?
looked through my configs and the error -- thinking that tcp-state-bypass *should* answer this.
look at the acl. apparently -- the 0.0.0.0/0 was turned into a "host" statement rather than an "any" statement.
shit.
remove configs, replace acl, reapply configs.
we're back in business. everything works. getting ready to rip out my 871w now.
thanks to everyone for chiming in.
q.