topic Re: FPR 1120 - Traffic to/from the Inside interface to other interface in Network Security

FPR 1120 - Traffic to/from the Inside interface to other interfaces

john.garza — Wed, 28 Sep 2022 12:14:27 GMT

We have an FPR 1120 that we're configuring and we have a Wireless LAN controller on the inside interface that WiFi APs will need to connect to from the other FPR interfaces; i.e. 1/3, 1/4, etc. On our existing ASA 5506-X I think we used a command that allowed traffic between interfaces, it was something about the same security level ?? Is there a similar command on the FPR to allow traffic between interfaces ?

Re: FPR 1120 - Traffic to/from the Inside interface to other interface

Rob Ingram — Wed, 28 Sep 2022 12:18:00 GMT

@john.garza you are referring to the ASA command "same-security-traffic permit inter-interface" this is enabled as default on the FTD, you just need to permit the traffic in the Access Control Policy.

Re: FPR 1120 - Traffic to/from the Inside interface to other interface

Sheraz.Salim — Wed, 28 Sep 2022 12:21:26 GMT

are you running the ASA code on FTD unit give command 'same-security-traffic permit inter-interface'

Unlike with classic ASA software, Firepower Threat Defense by default allows same-security traffic both inter- and intra-interface.