We have set up a new environment behind an ASA firewall with multiple vlans off of the firewall. We have three different clusters that have been set up in different vlans, these are windows server 2003 64bit boxes. We have set up these clusters with crossover cables for the heartbeats. The problem we are having on all three clusters is that even though we have not put a gateway on the interfaces of the crossovers we are seeing denies in the firewall with a source address of the crossovers. I don't know if it makes any difference but that address that they are trying to reach are the addresses of our SAN Controllers on port 137. Weird thing is that we have the same environment set up as a "test" environment behind a different firewall and we are not seeing this traffic from the cluster's set up in this environment. We are using 192.168.100.200 and 201 on one of the servers for the heartbeat, and 10.10.10.x for the other two. Any help would be greatly appreciated.