How to bypass traffic/disable function on Cisco Firepower

[quyentv]

Hi all,

I am facing issue: Firewall Cisco Firepower block traffic between 2 zone but I not show block traffic on event.

I decriable about my system:

1. I have Firewall Cisco Firepower running HA, and have 2 zone: Sec-zone and User-zone.

2. I take capture traffic Sec-zone to FW and FW to User-zone and see FW block a lot of traffic from Sec-zone. Sec-zone to FW via a sub-int and  User-zone to FW via another sub-int, I did check anti-spoofing and see not enable on any sub-int. FW not have module IPS.

I'm not show traffic block with my knowledge.

Everybody, you can suggest any idea to check and fix my issue.

Thanks all

[Marvin Rhoads]

Please clarify your current setup. Is it a Firepower appliance running Firepower Threat Defense? An ASA running Firepower service module? Something else?

If it's FTD can you share a screenshot of your Access Control Policy as deployed?