I've changed our Watchguard XTM firewall for Cisco ASA 5508-x, all seems to be working but do have one problem though... The nat / pat connections from the outside stop working.
We have a single external IP address, and so use effectively port forwarding to open firewall to the servers. The connections are fine from inside, but not from the internet.
If I do a "clear arp" on the firewall, the connections start working again for a while...
I disabled the secondary firewall.
On some servers, there were two nic's connected without any teaming software, so I've removed the second cable.
I've rebooted the servers but still get the issue...
Here's an example of the nat config for a connection to a servers port 80 using port 90 on the outside
object network Server1_90 host 192.168.1.66
access-list OUTSIDE extended permit tcp any object Server1_90 eq www
object network Server1_90 nat (inside,EXT_PUB_INT) static interface service tcp www 90