cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5062
Views
0
Helpful
10
Replies

Firewall blocking an address

gvindio
Level 1
Level 1

 

I am trying to set up Call manager CDR records to go to our new cloud call accounting server and keep getting blocked by the firewall and hope you can direct us to the right place to fix this.

 

I see this in Events:

 



9A5459FA-74CF-46EE-B39D-241B76FDCE13.jpeg

And I created this policy rule but it still doesn’t work:

 

44398424-0BE8-4C5B-9EEC-57AF6181143A.jpeg

 

 

 

 

 

 

10 Replies 10

Tyson Joachims
Spotlight
Spotlight

I don't see where this packet was blocked. I noticed that you're using the Firepower Device Manager and are looking at events. Have you used the filter "Rule Action=Block" and "initiatior IP=10.1.32.11". This will only show traffic that is blocked from that host. If you leave it on this page for a little while and don't see any packets getting blocked, it may be something else that is causing the packets to be rejected.

I ran it again and I still show it being blocked.

[cid:685B74C6-1CAB-4451-84B1-4448846DE4F8]

[cid:78E49DF7-3E98-42D6-AB8F-5D4F81E96A35]

If you were adding screenshots, the images did not come through. Could you please try again?

gvindio_0-1612554088369.jpeg

 

 

gvindio_1-1612554120749.jpeg

 

Tyson Joachims
Spotlight
Spotlight

What does your "inside_access_in" policy look like?

[cid:415EE74E-7DBB-4B7C-9963-734AC158D55B] Please type your reply above this line -##


Sent from my iPhone

[cid:9D919D6B-D4D3-43BF-8B7F-2CF2B96C377A] Please type your reply above this line -##


Sent from my iPhone

I'm not sure how you adding pictures to your post but they are not coming through


Capture.JPG

Peter Koltl
Level 7
Level 7

On the previous screenshot the source port was also set. Now it is ‘any’ so the corrected rule may as well work now.