topic Re: Traffic not hitting rule in Network Security

Traffic not hitting rule

Nikola PEnev — Mon, 13 Jan 2025 13:39:20 GMT

Hi Folks,

I'm having some issues

I have an outside network 10.246.133.192/26 and inside host in network 10.244.17.99.

The traffic between them is hitting for the temporary full access rule and doesnt hit the specific rule i've already applied. I'm attaching a two pics - the specific rule (outside network Sandbox_Clients_1016 (10.246.133.192/26) and inside network PKI_EIDN_1233 (10.244.17.96/28)

The second picture is the log saying the last full access rule has been hit.

Thank you for any suggestions 🙂

Cheers

Re: Traffic not hitting rule

MHM Cisco World — Mon, 13 Jan 2025 13:50:41 GMT

are you sure you config the Zone correctly ? did you check the interface in Zone ?

what is the default action of ACP ?

MHM

Re: Traffic not hitting rule

Nikola PEnev — Mon, 13 Jan 2025 13:58:22 GMT

I have 2 separate WAN interfaces - both of the are in outside_zone. The routing is correct and working properly vie routing policy.

On the rule itself i didnt specify source or destination zone (its any).

The default action is Trust all traffic but its nit hit because of the allow all last rule

Re: Traffic not hitting rule

Marvin Rhoads — Mon, 13 Jan 2025 14:01:01 GMT

I see you are trying a ping. Have you tried the application protocol?

Also, what does packet-tracer tell you?

Re: Traffic not hitting rule

MHM Cisco World — Mon, 13 Jan 2025 14:17:38 GMT

Do you config any prefilter ?

also do you use FQDN in Obj of ACP?

MHM