Sourcefire on ASA security Zone

relsethagen — Tue, 12 Mar 2019 12:38:25 GMT

I am looking for some information on the ability to write Zone Based access Control rules using the Sourcefire on ASA module. I can create ASA security Zones which it looks like basically just associate the interfaces on the ASA with a security Zone, but I haven't been able to use these rules to block traffic. I have set up in the Global policy to redirect all traffic to the SF module, but I am a little unclear how and or if the SF module is aware of the traffic flow through interfaces on the ASA. If this awareness is not there then it seems to me that the security zone configuration is not at all useful when building Access policies for ASA SF modules. I would love some insight or documentation on how this process works but I cannot find it.

Greetings,I'm running 5.3.1.2

Arnold Montemayor — Wed, 11 Mar 2015 18:30:09 GMT

Greetings,

I'm running 5.3.1.2.

I had all my rules in place, based on security zones (all zones pointing to appropriate interfaces on the ASAs) and none of the rules were being "hit". I changed my rules from zones to networks, and viola, everything is working just fine.

If anyone knows how to use a "Source Zone" in an "Access Control" policy, please let me know.

topic Sourcefire on ASA security Zone in Network Security

Sourcefire on ASA security Zone

Greetings,I'm running 5.3.1.2