Hair-pin traffic on the ASA FTD / FMC

[JMCNEL]

emote site router ==> ipsec tunnel==> 5555x FTD / FMC (ASA headend)

I see ALL event details of traffic (local and web traffic) that is crossing the ipsec tunnel in the CLI of the ASA FTD but I only see local traffic in the FMC. I do not see any 80 or 443 event details in the FMC.

The ASA FTD has  a NAT rule to U-turn internet traffic (outside to outside)

We do see translation and traffic going out of ASA outside interface. When this is not a through traffic, do FIREPOWER / ASA FTDwe expect an event to be created on fmc dashboard? We dont see it in the FMC - only in the CLI

Any input would be greatly appreciated.

[Marvin Rhoads]

Good question. I just checked one of mine and confirm I also do NOT see connection events for VPN users.

I'm thinking we may need to add an explicit allow ACP rule for Outside-Outside traffic with logging enabled.