topic Re: Firepower services, Blank Dashboard. Not reporting data. in Network Security

Firepower services, Blank Dashboard. Not reporting data.

jkrato — Tue, 12 Mar 2019 14:16:13 GMT

Set up firepower services. Followed various documentation. Once completed noticed the graphs weren't populating. Realized I didn't have licensing so I purchased that. Still doesn't work.

The firewall can ping the firepower module

When I run:
show service-policy sfr

I get:

Global policy:
Service-policy: global_policy
Class-map: SFR
SFR: card status Up, mode fail-open monitor-only
packet input 0, packet output 21152328, drop 0, reset-drop 0

Shouldn't the packet input match the packet output?

This probably means I have a mis-configuration somewhere.... But I am not sure where to start.

Thanks

Re: Firepower services, Blank Dashboard. Not reporting data.

Abheesh Kumar — Sat, 02 Feb 2019 09:16:24 GMT

Hi,
PLease share the access-list you configured on the class-map.

HTH
Abheesh

Re: Firepower services, Blank Dashboard. Not reporting data.

jkrato — Mon, 04 Feb 2019 13:42:24 GMT

How do you do that in command line? Are talking about in the firepower config?

Re: Firepower services, Blank Dashboard. Not reporting data.

Ashish Jhaldiyal — Mon, 04 Feb 2019 16:13:47 GMT

You need to issue the following commands on the firewall,

show run class-map SFR

make sure you have an ACL in the match access-list statement something like " match access-list SFR-ACL"

SFR-ACL should include traffic that you want to send to SFR Module.

Below is the output from my lab firewall.

access-list SFR_ACL extended permit ip any any

class-map SFR_ACL
match access-list SFR_ACL

policy-map global_policy

class SFR_ACL
sfr fail-open

Re: Firepower services, Blank Dashboard. Not reporting data.

jkrato — Tue, 05 Feb 2019 15:26:13 GMT

I must have done something wrong... Here is what I got

ciscoasa# show run class-map SFR
!
class-map SFR
match any
!
ciscoasa#

Re: Firepower services, Blank Dashboard. Not reporting data.

jkrato — Fri, 08 Feb 2019 13:30:54 GMT

Can you offer anymore help?

Re: Firepower services, Blank Dashboard. Not reporting data.

jkrato — Fri, 08 Feb 2019 13:35:45 GMT

class-map SFR
match any
class-map inspection_default
match default-inspection-traffic
!