topic Firewall blocking an address in Integrated Security Platform

Firewall blocking an address

gvindio — Thu, 04 Feb 2021 23:50:03 GMT

I am trying to set up Call manager CDR records to go to our new cloud call accounting server and keep getting blocked by the firewall and hope you can direct us to the right place to fix this.

I see this in Events:

And I created this policy rule but it still doesn’t work:

Re: Firewall blocking an address

TJ-20933766 — Fri, 05 Feb 2021 01:10:03 GMT

I don't see where this packet was blocked. I noticed that you're using the Firepower Device Manager and are looking at events. Have you used the filter "Rule Action=Block" and "initiatior IP=10.1.32.11". This will only show traffic that is blocked from that host. If you leave it on this page for a little while and don't see any packets getting blocked, it may be something else that is causing the packets to be rejected.

Re: Firewall blocking an address

gvindio — Fri, 05 Feb 2021 16:35:54 GMT

I ran it again and I still show it being blocked.

[cid:685B74C6-1CAB-4451-84B1-4448846DE4F8]

[cid:78E49DF7-3E98-42D6-AB8F-5D4F81E96A35]

Re: Firewall blocking an address

TJ-20933766 — Fri, 05 Feb 2021 19:08:36 GMT

If you were adding screenshots, the images did not come through. Could you please try again?

Re: Firewall blocking an address

gvindio — Fri, 05 Feb 2021 19:42:15 GMT

Re: Firewall blocking an address

TJ-20933766 — Fri, 05 Feb 2021 19:58:40 GMT

What does your "inside_access_in" policy look like?

Re: Firewall blocking an address

gvindio — Fri, 05 Feb 2021 20:19:54 GMT

[cid:415EE74E-7DBB-4B7C-9963-734AC158D55B] Please type your reply above this line -##

Sent from my iPhone

Re: Firewall blocking an address

gvindio — Sat, 06 Feb 2021 00:12:54 GMT

[cid:9D919D6B-D4D3-43BF-8B7F-2CF2B96C377A] Please type your reply above this line -##

Sent from my iPhone

Re: Firewall blocking an address

TJ-20933766 — Sat, 06 Feb 2021 00:17:55 GMT

I'm not sure how you adding pictures to your post but they are not coming through

Re: Firewall blocking an address

gvindio — Sat, 06 Feb 2021 00:48:06 GMT

Re: Firewall blocking an address

Peter Koltl — Tue, 02 Mar 2021 17:50:49 GMT

On the previous screenshot the source port was also set. Now it is ‘any’ so the corrected rule may as well work now.