How to inspect inbound traffic using Firepower

Brad_Shawh — Mon, 01 Mar 2021 08:24:36 GMT

Our current setup using ASA and Firepower

Inside : 20.20.20.0/24

Outside : x.x.x.x

My access control policy is such that it inspects 'Inside' to 'Outside', where 'Inside' is Firewall trusted interface, and 'Outside' is Outside interface.

I understand all packets outbound are inspected, but what if I have an FTP server on the inside that is accessible from internet? How can I inspect this inbound traffic knowing the FTP allows data copy from internet.

Re: How to inspect inbound traffic using Firepower

Dinesh Moudgil — Mon, 01 Mar 2021 08:31:09 GMT

You could have a specific ACP rule allowing the traffic from outside to inside zone on a specific port and application.

Section "Modify access control policy to allow outside access " for your reference
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/LTRSEC-2101-LG.pdf

Thank you,

Dinesh Moudgil

P.S. Please rate helpful posts.

topic Re: How to inspect inbound traffic using Firepower in Network Security

How to inspect inbound traffic using Firepower

Re: How to inspect inbound traffic using Firepower