https://community.cisco.com/t5/network-security/a-single-port-forwarding/m-p/4098923#M1070839 <P>hello to to everyone, as i am new in firepower 1140 device, i would to like to configure a static nat to the inside interface 192.168.1.1 translated to the public ip which is the outside interface through a pppoe connection (running vesion6.6.0).the goal is to access the web interface of FTD EXTERNALLY.</P><P>&nbsp;</P><P>also i have set up one more rule to access an sqlserver directly with public ip ,and seems is working.i dont know why the one is working and the it doesnt. Any ideas?</P><P>also i attached photos with nat rules and access control policies.</P><P>&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="access control.PNG" style="width: 849px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/76217i4F258E34E006FC86/image-size/large?v=v2&amp;px=999" role="button" title="access control.PNG" alt="access control.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="nat rules.PNG" style="width: 847px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/76216iA3C46E673A8835BC/image-size/large?v=v2&amp;px=999" role="button" title="nat rules.PNG" alt="nat rules.PNG" /></span></P> Sun, 07 Jun 2020 15:32:48 GMT George Sofroniadis 2020-06-07T15:32:48Z https://community.cisco.com/t5/network-security/a-single-port-forwarding/m-p/4098923#M1070839 <P>hello to to everyone, as i am new in firepower 1140 device, i would to like to configure a static nat to the inside interface 192.168.1.1 translated to the public ip which is the outside interface through a pppoe connection (running vesion6.6.0).the goal is to access the web interface of FTD EXTERNALLY.</P><P>&nbsp;</P><P>also i have set up one more rule to access an sqlserver directly with public ip ,and seems is working.i dont know why the one is working and the it doesnt. Any ideas?</P><P>also i attached photos with nat rules and access control policies.</P><P>&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="access control.PNG" style="width: 849px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/76217i4F258E34E006FC86/image-size/large?v=v2&amp;px=999" role="button" title="access control.PNG" alt="access control.PNG" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="nat rules.PNG" style="width: 847px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/76216iA3C46E673A8835BC/image-size/large?v=v2&amp;px=999" role="button" title="nat rules.PNG" alt="nat rules.PNG" /></span></P> Sun, 07 Jun 2020 15:32:48 GMT https://community.cisco.com/t5/network-security/a-single-port-forwarding/m-p/4098923#M1070839 George Sofroniadis 2020-06-07T15:32:48Z https://community.cisco.com/t5/network-security/a-single-port-forwarding/m-p/4098940#M1070841 Hi,<BR />The Access Policies are for traffic "through" the firewall not "to" the firewall. In FDM, you need to navigate to System Settings &gt; Managment Access, and permit access on the desired interface.<BR /><BR />HTH Sun, 07 Jun 2020 16:13:59 GMT https://community.cisco.com/t5/network-security/a-single-port-forwarding/m-p/4098940#M1070841 Rob Ingram 2020-06-07T16:13:59Z