Cisco ASA Audit Event: 106020

106020: Deny IP teardrop fragment

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network. 

Message: %ASA-2-106020: Deny IP teardrop fragment (size = number, offset = number) from IP_address to IP_address.

Event 106020 is generated when the ASA discards an IP packet with a teardrop signature containing either a small offset or fragment overlapping.

How could you resolve this situation?

Contact the remote peer administrator or escalate this issue according to your security policy.

Cisco ASA Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.