Cisco FTD blocking inside traffic

[Arild Andersen]

In our test environment we have tried activate our Cisco FTD 6.2.2.1, but we have one reoccurring problem, the FTD keeps blocking traffic that goes between hosts on the same inside network. When we check the connection log we see that it hits the "Default Action, Monitor Policy"rule. We have also tried to enable a Trust and allow between inside (source) and inside (destination), but it still block the traffic with Default Action as mentioned above.

And as a last resort we tried to add a Prefilter rule with Fastpath to make sure that the FTD does not inspect traffic on the inside network, but still same result as above.

Anyone got some tips to what Im doing wrong or what I should check?

[Marius Gunnerud]

When you say between hosts on the same inside network, do you mean they are on the same subnet or located off the same security zone in relation to the FTD?

Are you using a URL to connect between the hosts on the inside network?

I would also suggest running a system support firewall-engine-debug between two hosts having issues.