FTD managed via FDM Access Policy

[mumbles202]

Have a 1010 running 6.6.4 with 10 rules, 1 of which allows the internal DNS server outbound dns over udp and tcp for server from inside to outside. The server fails dns resolution and packet tracer shows the traffic dropped because it hits the default deny ant any rule. I also tried removing the port restrictions and changing the rule to Trust vs Allow,but all  yielded the same result. If I change the default action on the policy to Allow it works without any issue. Is there a setting I'm missing?

[Rob Ingram]

@mumbles202 

Traffic isn't matching that rule for some reason, can you provide a screenshot of your rule.

You could also run "system support firewall-engine-debug" command from the CLI, filter on the source IP address of the internal DNS server and provide the output for review.

[mumbles202]

Thanks for the reply.  After pulling it out and reviewing it in more detail i found the problem with the rule so will redeploy.