Cisco ISR is reporting
%FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1979009128 1500 bytes is out-of-order; expected seq:1978984512. Reason: TCP reassembly queue overflow - session
I have adjusted config up to these limits to no avail:
ip inspect tcp reassembly memory limit 4096 ip inspect tcp reassembly queue length 1024
This is occurring on traffic originating from the Internet or from a GRE tunnel, resulting in application timeout and rather slow download speeds.