I'm getting syslogs from my ASA: 10/24/2011 11:01 AM : %ASA-5-500003: Bad TCP hdr length (hdrlen=24, pktlen=58) from 110.75.27.14/80 to x.y.z.a/23597, flags: SYN ACK , on interface Outside Since I have this Block from China as my first deny statement, Why do I still get these Syslogs? Thanks Scott