How to inspect inbound traffic using Firepower

[Brad_Shawh]

Our current setup using ASA and Firepower

Inside : 20.20.20.0/24

Outside : x.x.x.x

My access control policy is such that it inspects 'Inside' to 'Outside', where 'Inside' is Firewall trusted interface, and 'Outside' is Outside interface.

I understand all packets outbound are inspected, but what if I have an FTP server on the inside that is accessible from internet? How can I inspect this inbound traffic knowing the FTP allows data copy from internet.

[Dinesh Moudgil]

You could have a specific ACP rule allowing the traffic from outside to inside zone on a specific port and application.

Section "Modify access control policy to allow outside access " for your reference
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/LTRSEC-2101-LG.pdf

Thank you,

Dinesh Moudgil

P.S. Please rate helpful posts.