Cisco Firepower Device Manager (FDM) Management over Site to Site VPN

[Amoret]

I have a Site to Site VPN setup from an ASA 5510 (ASA Code) to an ASA 1010 (Without FMC); we are using the FDM GUI to manage this. The Site to Site VPN is working fine!

I'm trying to open the HTTPS FDM GUI over the site-to-site VPN.

ASA5510 192.168.24.0/22

ASA1010 10.0.64.0/24

On the LAN of the 10.0.64.0/24 network, we can access the FDM GUI (10.0.64.1).

On the LAN of the 192.168.24.0/22 network, we can not access the FDM GUI (https://10.0.64.1), we also can't ping 10.0.64.1 over the site to site

[Rob Ingram]

@Amoret duplicate post, answer here - https://community.cisco.com/t5/network-security/enable-icmp-ping-over-site-to-site-vpn-asa5510-to-fp-asa1010/m-p/4561002#M1087783

[Amoret]

I created a FlexConfig Template - "management-access inside" and Negate Template "no management-access inside" and now I can ping the inside interface, that's 50% of what I am trying to do but I can not access the FDM GUI over the Site-To-Site VPN? 

[Rob Ingram]

@Amoret did you change the management access to permit the connection from the source network?

[Amoret]

Yes, well i think so. lol. 

[Rob Ingram]

@Amoret the inside interface is a data interface, that screenshot is of the management interface.

[Amoret]

I'm starting to hate the FDM, the ASA was so much easier but I am forcing myself to learn this! Saying that are you referring to the "Data Interfaces"? If so I have tried adding it here. I added the 192.168.24.0 network to the inside and for kicks, I added it to the outside also.. still not working  

[Rob Ingram]

@Amoretdid you deploy the policy? The orange dot indicates you need to deploy some changes.

[Amoret]

Yes, it's deployed. I have added it and removed it a few times, I added it back for the screenshot then deployed it. I can ping the inside interface now but can not access https://10.0.64.1 over the site-to-site. 

[Amoret]

No more comments?