FPR 1120 - Traffic to/from the Inside interface to other interfaces

[john.garza]

We have an FPR 1120 that we're configuring and we have a Wireless LAN controller on the inside interface that WiFi APs will need to connect to from the other FPR interfaces; i.e. 1/3, 1/4, etc.  On our existing ASA 5506-X I think we used a command that allowed traffic between interfaces, it was something about the same security level ??  Is there a similar command on the FPR to allow traffic between interfaces ?

[Rob Ingram]

@john.garza you are referring to the ASA command "same-security-traffic permit inter-interface" this is enabled as default on the FTD, you just need to permit the traffic in the Access Control Policy.

[Sheraz.Salim]

are you running the ASA code on FTD unit give command 'same-security-traffic permit inter-interface'

Unlike with classic ASA software, Firepower Threat Defense by default allows same-security traffic both inter- and intra-interface.