NAT Issue "sp-security-failed Slowpath security checks failed"

Zargham Haider — Tue, 12 Mar 2019 09:21:50 GMT

Hi,

I was working fine with ASA 5510 and configured some servers inside which were visible for outside world. i bought new ASA 5506X FirePower. when i configured it gives this error "sp-security-failed Slowpath security checks failed".

when i check through Packet tracer....it shows that action is allow when packet has outside destination and it drops when packet has inside destination and it drops by rule. like from inside to outside is allowed but from outside to inside is droped.

NAT rules are configured and Public servers are also configured. with same pattren in ASA 5510 everything working fine but in ASA 5506X it is not working.

sample configuration of 5506X is :

ftp mode passive
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

!!!!

object network Server_ABC
nat (inside,outside) static LAN_xx.xx.xx.76_ABC
object network Server_DEF
nat (inside,outside) static LAN_xx.xx.xx.74_DEF
object network server_GHI
nat (inside,outside) static LAN_xx.xx.xx.77_GHI
object network Server_JKL
nat (inside,outside) static LAN_xx.xx.xx.75_JKL
!
nat (inside,outside) after-auto source dynamic any interface
access-group inbound in interface outside
access-group inside_access_in in interface inside
access-group Winside_access_in in interface Winside
route outside 0.0.0.0 0.0.0.0 xx.xx.xx.73 1

please suggest....!!!!!

_________

ZarGham

topic NAT Issue "sp-security-failed Slowpath security checks failed" in Network Security

NAT Issue "sp-security-failed Slowpath security checks failed"