I have just setup a cisco ASA with vlan trunking(vlan 4 and 5) between the ASA and a layer 3 switch. As the ASA has a default route point to vlan 5 interface; not sure if that may be the cause of routing/stateful inspection issue. I have attachd a reference diagram below for reference
ASA ----(vlan 4 and 5 trunk)------layer 3 switch
Not sure, but the flow of traffic looks incorrect; traffic from the internal/inside of the asa have no issues accessing network resources, however traffic from the other vlan 4 have issues; not sure if it may be due to the default route on the asa and that the layer 3 switch is holding both the SVIs?
Traffic may be accessed internally and be natted on vlan 5 without any issues; however traffic to vlan 4 is not accessible.
I was looking at ASA tcp -bypass feature (This is to workaround the directly connected svi instead of a static route)? Not sure which may be the recommended approach/alternate better approach?
I have attached a running configuration of the asa for reference