ASA 5506X firewall seems to be blocking Microsoft System Center traffic

Owen Mould · ‎08-09-2017

We've deployed several ASA 5506X firewalls in a private Layer 2 cloud. The Outside interface connects to the cloud, the inside to the location's LAN. They're on a private network, so there are very few ACLs applied to block traffic--that's done farther upstream.

Since we put in these ASAs, we haven't been able to access LAN hosts with our System Center server (on another LAN but connected to the same private cloud, on an IP subnet of the same supernet).

I've looked up the ports System Center uses, and none are being blocked. The log doesn't report any traffic being denied.

Any ideas? These are running ASA version 9.8(1).

Thanks.

Lucas Phelps · ‎08-09-2017

John, are you using the Firepower Management Center (FMC) to manage your 5506s?

If so, go to the Analysis tab > Connections > Events. Choose the appropriate time frame and search for the 'Action' field containing 'Block'.