Question : Cisco ASA Error Message

I got the below error message in my Cisco ASA. Could some one explain what does it mean? Is there anything I need to take care of or change the configuration in my ASA?
May 25 14:11:33 May 25 2010 04:11:33 FBCNDSFW : %ASA-4-313005: No matching connection for ICMP error message: icmp src outside: dst VGA: (type 11, code 0) on outside interface.  Original IP payload: tcp src dst

Answer : Cisco ASA Error Message

Type 11 icmp is a time exceeded packet.

So what this means is there is a packet arriving on the outside interface destined for from  The most likely scenario is that these devices are attempting to communicate, but the routing is not present or is incorrect within the internal network.  So the packet ended up at the firewall, and followed the default route out to the internet router.  This then forwarded it back to the firewall, which again forwarded it back to the ASA - back and forth until the packet TTL reduced to zero.  Then the icmp packet was emitted.

Note that this scenario is without any knowledge of your network, so you will  need to adapt it for your network.

If you to a tracert from to you'll see the packet heading for the firewall and out the outside interface instead of to the network.
Random Solutions  
programming4us programming4us