Is there a similar entry to "management-interface inside" on FTD CDO

[ABaker94985]

The management system at our HQ reaches out to the inside interfaces of the branch firewalls through site-to-site VPN tunnels for both pings and SNMP, and on the firewalls running ASA firmware, we use "management-interface inside." Is there a similar command for the FTD/CDO? Is this a command that go in flex config? I've not been able to find documentation on how to get this inserted.

The system I'm currently working with is an ASA 5508-X running 6.6.1. The ACP is permitting this, but I'm also not sure if there is something on the control plane that needs to be opened up. Is there anything else I need to consider?

Thank you.

[Rob Ingram · Accepted solution]

@ABaker94985 

Yes you can use Flexconfig to configure management-access command

https://community.cisco.com/t5/vpn/anyconnect-to-connect-to-firepower-inside-interface/td-p/4083536

https://community.cisco.com/t5/vpn/ftd-management-via-vpn-issue/td-p/4088577

However cisco TAC recommends to connect to the outside interface to manage the device

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg50549?rfs=iqvred

[ABaker94985]

Thanks for the super fast response. That's exactly what I was looking for. Take care.