None of our users are able to dowonload Adobe flash player 11 as the download process terminates at 47% completion and on TMG we see the following error message:
| Denied Connection | CAR-WEBPROXY 6/13/2013 9:39:33 AM |
|---|---|
| <id id="L_LogPane_LogType">Log type:</id><id id="L_LogPane_FirewallService">Firewall service</id> | |
| <id id="L_LogPane_Status">Status: </id>A non-SYN packet was dropped because it was sent by a source that does not have an established connection with the Forefront TMG computer. | |
| <id id="L_LogPane_Rule">Rule:</id>None - see Result Code | |
| <id id="L_LogPane_Source">Source:</id>Internal (10.46.18.189:64989) | |
| <id id="L_LogPane_Destination">Destination:</id>Local Host (10.46.16.94:8080) | |
| <id id="L_LogPane_Protocol">Protocol:</id>HTTP Proxy | |
| |
Additional
information I am running Forefront Threat Management Gateway Version: 7.0.7734.100 on Windows 2008 R2 x64 Server.
Thi is not the only situation when a non-SYN error message occurs.
Any help will be appreciated.
This invariably follows a "Close Connection" action by TMG such as:
| Closed Connection | CAR-WEBPROXY 6/13/2013 11:16:39 AM |
|---|---|
| <id id="L_LogPane_LogType">Log type:</id><id id="L_LogPane_FirewallService">Firewall service</id> | |
| <id id="L_LogPane_Status">Status: </id>A connection was abortively closed after one of the peers sent an RST packet. | |
| <id id="L_LogPane_Source">Source:</id>Internal (10.46.18.189:51280) | |
| <id id="L_LogPane_Destination">Destination:</id>Local Host (10.46.16.94:8080) | |
| <id id="L_LogPane_Protocol">Protocol:</id>HTTP Proxy | |
| |