topic Re: Cisco Firepower 1010e unable connect to internet in Network Security

Cisco Firepower 1010e unable connect to internet

aarta — Mon, 24 Jun 2024 08:14:30 GMT

Hi All,

I recently have firepower 1010e.

with current configuration, i am able to ping and get reply from internet, but the device unable to connect to firmware update & all devices connected unable to do connect to internet.

i put the config attached.

Could you please help me?

Thankyou

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Mon, 24 Jun 2024 08:52:10 GMT

Re: Cisco Firepower 1010e unable connect to internet

aarta — Tue, 25 Jun 2024 10:49:47 GMT

Hi MHM,

Thankyou for helping me out. i've follow your guide but unfortunately the problem still persist (attachment: new.stat.png)

i attached the latest condition of the firepower, hope it could point what missing from my config.

Thankyou

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Tue, 25 Jun 2024 10:57:22 GMT

friend your NAT use interface inside/outside
but there is no interface called inside
there is interface called
inside.a
inside.b
inside.linxus

so you need to use these interface name in NAT otherwise it will not work.

note:- if you to NAT traffic from these three Inside.X interface you need three NAT one for each interface

MHM

Re: Cisco Firepower 1010e unable connect to internet

aarta — Tue, 25 Jun 2024 11:31:26 GMT

hi MHM,

Can i use this zone as my alternatives? or should i use i zone each interface in one zone?

Thankyou

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Tue, 25 Jun 2024 11:37:03 GMT

One zone for each interface.

MHM

Re: Cisco Firepower 1010e unable connect to internet

aarta — Tue, 25 Jun 2024 12:13:50 GMT

it should be like this, right?

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Tue, 25 Jun 2024 12:16:16 GMT

all correct except one thing
you need to config it auto not manual NAT (check my previous comment)

thanks a lot

MHM

Re: Cisco Firepower 1010e unable connect to internet

aarta — Tue, 25 Jun 2024 12:34:36 GMT

Sorry, im bit confused before.

hope it doesn't bother you. should i keep this new config or delete all the manual NAT? (only keep the auto)
Thankyou.

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Tue, 25 Jun 2024 12:38:17 GMT

new NAT is correct
but please remove the OLD manual NAT.
that it for dynamic NAT

MHM

Re: Cisco Firepower 1010e unable connect to internet

aarta — Thu, 27 Jun 2024 12:22:17 GMT

hi NHM,

upon the testing, unfortunately i am still unable to connect to internet.

Any suspect?

Re: Cisco Firepower 1010e unable connect to internet

MHM Cisco World — Thu, 27 Jun 2024 12:37:59 GMT

https://ccnpsecuritywannabe.blogspot.com/2019/09/configuring-ftd-623-via-firepower.html

check this link especially mgmt how it need to connect to Inside to make mgmt interface have access to Internet
please for this point if you have any Q ask

thanks
MHM

Re: Cisco Firepower 1010e unable connect to internet

aarta — Sat, 29 Jun 2024 11:51:03 GMT

Hi NHM.

apprently, it fix by adding DNS to my outside port. the device is now able to connect to internet and able to update.

thankyou.