Hi,

I have see the solution guide that we have to issue the command:
service resetinbound
And there is a reference for more information (PIX Performance Issues Caused by IDENT Protocol)
Looking at Cisco for this information i have found that solution is for PIX software version 6.3
Looking at ASA software version 7.2 command reference i see that service command has the option resetoutside, wich by reference is the preffered method os solving the IDENT problem.
Folow the links:

PIX Performance Issues Caused by IDENT Protocol
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094317.shtml


ASA 7.2 Command Reference
http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html#wp1290652

resetoutside Enables resets for TCP packets that terminate at the least secure interface and are denied by the security appliance based on access lists or AAA settings. When this option is not enabled, the security appliance silently discards the packets of denied packets. We recommend that you use the resetoutside keyword with interface PAT. This keyword allows the security appliance to terminate the IDENT from an external SMTP or FTP server. Actively resetting these connections avoids the 30-second timeout delay.

Which is the correct method?

Edited by Rafael Koike (06/18/08 11:13 AM)