I have my pix logging just errors to a syslog. I keep getting these.
Message=%PIX-3-106011: Deny inbound (No xlate) tcp src outside:68.228.132.125/1118 dst outside:207.179.254.67/64613
Message=%PIX-3-106011: Deny inbound (No xlate) tcp src outside:72.149.171.59/56191 dst outside:207.179.254.67/64613
Why would this constitute an error and how can I fix it?
Hi Nick,
%PIX-3-106011: Deny inbound (No xlate) string.
This message will appear under normal traffic conditions if there are internal users that are accessing the Internet via a web browser.
Anytime a connection is reset, when the host at the end of the connection sends a packet after the firewall receives the reset, this message will appear.
Cisco says it can typically be ignored.
----------------------------------
Nick, Cisco recommends you do the following:
Disable this syslog message from getting logged to the syslog server by entering the no logging message 106011 command.
Hope this helps.
Brad Reese BradReese.Com - Cisco Repair
Have something to add? Share your thoughts — no account required.
Ask the community — no account required