topic Re: Firepower 1010 in Network Security

Firepower 1010

Markflan — Wed, 06 Sep 2023 10:00:41 GMT

Hi there

I have a new firepower 1010 and for some reason I have the error message “gateway cannot be reached through port Ethernet 1/1 named outside” I know my isp line is up and running and NAT rule is on dynamic and yet I still have no internet on my devices. DHCP give out the correct details but I’ve nothing. Where am I going wrong ? I’ve reset 5 times now and. I joy please help

thanks

mark

Re: Firepower 1010

Mark Elsen — Wed, 06 Sep 2023 11:46:16 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvz32452

Re: Firepower 1010

Markflan — Wed, 06 Sep 2023 13:09:05 GMT

Hi there .. thanks for your message .. I’m afraid that didn’t work for me and still no outbound connection ?
I did just connect it off my old FW and did DHCP and worked fine but not an option as j want to remove the old FW completely

thanks

Re: Firepower 1010

Mark Elsen — Wed, 06 Sep 2023 14:12:36 GMT

- I have no further insights on it , if needed contact Cisco (TAC)

Re: Firepower 1010

Rob Ingram — Wed, 06 Sep 2023 14:43:31 GMT

@Markflan what is your configuration? Have you configured an Access Control Policy rule to permit the relevant traffic?

Provide screenshots of your NAT rules and ACP rules.

Run packet-tracer from the CLI to simulate the traffic flow from inside to outside, this will identify where any problems lie.

Re: Firepower 1010

Marvin Rhoads — Wed, 06 Sep 2023 18:15:04 GMT

As noted in the BugID referenced by @Mark Elsen we see this on 7.0 and earlier when there's no DNS resolution and/or cisco.com is unreachable.

It would be a good idea to first update to the current recommended release (7.2.5) and see if it clears up - the bug should not affect that version. You could also ensure you have a DNS server set for the device so that it can resolve cisco.com for the connectivity test it does to verify connectivity and change the icon color.

It's quite similar to Windows' NCSI (https://learn.microsoft.com/en-us/windows-server/networking/ncsi/ncsi-overview) with its associated icon in the taskbar.

Re: Firepower 1010

Markflan — Thu, 28 Sep 2023 11:12:50 GMT

Hi All

thanks for all the advise and follow ups but it turned out that when i recived the latest version of software 7.2.5 from Cisco for the 1010 it immediately worked and then as I found out there was a bug in the version i had .. go figure 😞

thanks again

Mark