I have a ZBFW that I need to allow a tftp client to access a tftp server through. I have the zones all working but I cannot get the tftp client to connect to the tftp server on udp 69. I do not even see attempted connections or even drops when I run a sh logging on the router. My class-maps and policy maps are below.
1. class-map type inspect match-any camera-to-wan
match access-group name camera-to-wan
2. policy-map type inspect camera-to-wan
class type inspect camera-to-wan
inspect
class class-default
drop log
3. zone-pair security camera-to-wan source camera destination wan
service-policy type inspect camera-to-wan
4. Extended IP access list camera-to-wan
10 permit tcp any host 10.1.150.158 eq tftp
Should I inspect TFTP traffic or allow it to pass? I am thinking my problem is with the policy map but I am not seeing any drops on the logs to the destination IP 10.1.150.158
