topic The Firepower module uses the in Network Security

Unable to ping from and to FirePower

alex.vue — Fri, 21 Feb 2020 13:45:48 GMT

Hi all,

I have a 5525x and wanted to setup the FirePower that comes with the ASA. I have read and followed the Cisco installation guide, but I am unable to access the FirePower module on the ASA. What I have done;

1. Installed FireSight Mangement --- (can ping internet, inside FW interface, and other host on a different subnet.)

2. FirePower module is configured with the same IP subnet as the inside firewall interface.

3. Management interface 'no nameif', no IP, and enabled on the same vlan as the inside interface.

FireSight Mgmt server is on VLAN101.

Management PC is on VLAN0101.

Inside FW interface is on VLAN2 (IP 192.168.2.251/24)

SFR is on VLAN2 (IP 192.168.2.249/24)

I am stuck, please help.

-Alex

The Firepower module uses the

Philip D'Ath — Tue, 15 Mar 2016 18:30:34 GMT

The Firepower module uses the external physical "Management" interface on the ASA. Have you got this interface plugged in?

Yes, It is plugged in. Switch

alex.vue — Tue, 15 Mar 2016 18:33:12 GMT

Yes, It is plugged in. Switch port is configured VLAN2. The interface status shows up/up.

And you have definitely

Philip D'Ath — Tue, 15 Mar 2016 18:45:10 GMT

And you have definitely loaded FirePower software onto the module, or have logged into the module to verify that there is software installed on it?

Log is also showing denied

alex.vue — Tue, 15 Mar 2016 18:45:14 GMT

Log is also showing denied TCP inbound connection from the module IP to the FireSight mgmt. Server. I am not sure why it's being denied. ACL for Inside interface is configured by default to permit any to the lower security zone. I have also enabled the 'enable traffic between two or more interface which are configured with same security levels'.

Yes sir.

alex.vue — Tue, 15 Mar 2016 18:51:57 GMT

Yes sir.

FYI, I can login from the Actually Firewall console, but I cannot login using its real ip.

For example,

- Login 192.168.2.251

- session sfr

I just want to update on the

alex.vue — Tue, 15 Mar 2016 21:18:49 GMT

I just want to update on the issue. I have placed a test machine on the same network as the SourceFire and I was able to access it. I am still unable to access from other VLAN.

Again, I can access the Firewall from other vlan which is on the same network as the SourceFire. But, I cannot access the SourceFire.

Thanks.