Firepower not reachable via ASDM

[martino-cisco]

Hi All,

I'm currently having an issue with an ASA5512 that is configured with work with Firepower. Firepower has been successfully installed and configured using the firewall's MGT interface in the same VLAN as the inside interface. Logging on via ASDM gets to about 17% while loading before giving the error 'Cannot connect to the Firepower module'.

- My connection is coming into via the Inside interface

- 'show module sfr' shows the module is 'Up'

- I am also able to log on to the CLI of the module and all seems fine. However, i can't get rid of this error

Worth noting that I have done the exact same build with another ASA5512 with Firepower via ASDM and it works.

I appreciate any feedback or assistance on this.

Thanks

[Marvin Rhoads]

What are your respective versions of ASA, ASDM and Firepower?

ASDM loads the Firepower bits based on what you would see when running "show module sfr detail" from the ASA cli. Does the output of that command match what you expect?

[martino-cisco]

Hi Marvin,

ASA version is 9.6.2

ASDM is 7.6.2

Firepower is 6.1.0-330.

Yes, the output of 'show module sfe detail' is as i expect. It also confirms the Data Plane status is Up

[Marvin Rhoads]

OK, your basics seem OK. those are generally pretty good versions (though I recommend going with the more recent 6.2.0.2).

Have you tried it from a different PC to rule out client-side issues?

[martino-cisco]

Hi Marvin,

Tried from a different PC. No luck. After some troubleshooting, I found that the traffic was actually reaching the firepower module but the return traffic from the firepower module wasn't getting back to the client that initiated the TCP session in the first place. That introduces a new issue entirely.

Thanks though