> Regardless, my Linux box does not have ECN enabled according to sysctl. > What could be causing my issue? Is the SSL server sending packets with ECN=1? What sw-version is on the pix?