Resolved! Threats from internal hosts
We have an in-depth internal penetration testing under way at the moment and it is becoming clear that our Firepower for ASA sensors are not blocking traffic sourced from IPs within the $HOME_NET range. We have a Trend Micro DDI probe at each of ou...