Monitoring inside interface from outside network doesn't work on FTD

[krzysztofmaciejewskiit]

I would like to monitor the FTD via SNMP on the FTD subinterface. My monitoring system is coming from outside, and should be polling the inside interface.
However, such traffic is not possible. I have read that it is not possible to communicate with the inside interface from the outside subnets.
If I check this option "Device Management Interface" in Platform Settings, should it be possible to monitor the FTD via the management port?

[Rob Ingram · Accepted solution]

@krzysztofmaciejewskiit Cisco usually suggests managing the firewall via the closest interface, i.e. outside. If you do that, I'd suggest using SNMPv3.

If you wish to manage via the mgmt interface, you could connect the mgmt interface to the local switch and route through the FTD to reach the mgmt interface.