09-13-2023 09:48 AM
I have a firepower 1140 with outside, inside and dmz zones and interfaces. inside and dmz are all NATed to the Outside interface and access control configured so that hosts from inside(192.168.22.0/24) and dmz(192.168.94.0/24) can access the Outside(internet) and its working. However, hosts from inside and dmz cannot communicate with each other despite an allow policy being configured for each. how can i rectify this ?
09-13-2023 01:36 PM
The ACP rule required To and From source.
you can check the Logs what is dropping ? also check the routing requirement.
09-13-2023 11:46 PM
Policies configured
09-14-2023 07:24 AM
NATed between DMZ and Inside and now i can host in DMZ can communicate with hosts in Inside. i hope this is the way to do it
09-14-2023 07:42 AM
This issue is solved ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide