topic Re: Firepower 1010 in Network Security

Firepower 1010

BornJames — Sat, 08 Jul 2023 02:55:11 GMT

Hello Team,

Have set up firewall with basics as well as some firewall rules. Everything seems to be working fine.

However on the front page for the internet link I am seeing "gateway cannot be reached through port ethernet 1/1"

Also rules like simple ones any any or even if I specify ports "HTTPS" works fine, however when im adding fqdn it stops working, is there a special way of adding the rules ?

anyone knows what could be the issue?

Re: Firepower 1010

MHM Cisco World — Sat, 08 Jul 2023 07:00:49 GMT

sorry can i see how you config OUTside interface ?

Re: Firepower 1010

BornJames — Sat, 08 Jul 2023 09:06:57 GMT

Hello, thank you for the reply.

here is the outside port the ip is 192.168.10.... ( it is connected to a modem )

all the other ports are on vlan 1 and ip is 192.168.1.... (dhcp server is enabled on the firewall)

Re: Firepower 1010

MHM Cisco World — Sat, 08 Jul 2023 09:19:20 GMT

this OK,
mgmt interface is connect to data interface, i.e. data interface is GW for mgmt.
but the mgmt interface have different subnet than 192.168.1.0, and you mention that the all other data interface have 192.168.1.0 ?

Re: Firepower 1010

BornJames — Sat, 08 Jul 2023 09:29:19 GMT

yeh the management is one a standard as specified in a starter guide

192.168.45...

Re: Firepower 1010

MHM Cisco World — Sat, 08 Jul 2023 10:28:53 GMT

that OK,
connect
mgmt TO data interface (not TO VLAN1 )
this data interface assign manual IP 192.168.45.1 (disable DHCP server for data interface)
go to mgmt interface make GW is data interface.
this above I think is solve issue for both mgmt interface and OUTside interface

Re: Firepower 1010

BornJames — Sat, 08 Jul 2023 10:47:54 GMT

thak you it did work, now it is all green,

would you know by any chance why when I enter the FQDN to lets say google.com it does not work, but works with any nay rule