Hello Hans, what about any suspicious syslog messages from your ASA? Have you used the Packet Tracer tool to discover and debug the way packets are processed? -- Yours sincerely, Andrey G. Sergeev (AKA Andris) http://www.andris.name/