Symptom
ZBF not able to identify the waas enabled flow and drops the ACK when it sees the 2G jump sequence number in the ACK(invalid sequence number)
Conditions
ZBF + WAAS on 4351 with ES2 NIM and WCCP redirection
Version through 16.5 till 16.6 is affected.
Workaround
configure an access-list on the ingress interface with log option that will force TCAM lookup to happen and issue resolves.
Be highly cautious as it may cause high cpu utilization.
Further Problem Description