I'm trying to create a control-plane ACL on the outside interface of one of our FTDs that's being managed by FDM. The following was pasted into the flexconfig template field:
access-list CPLANE extended permit tcp host VPN_Client_IP host VPN_Server_IP eq 443
access-list CPLANE extended deny ip any any
access-group CPLANE in interface outside control-plane
However, this cannot be applied within FlexConfig because of the error "Block list CLI error: access-list CPLANE extended ..." for the first two lines. There isn't an error on the third line. This error shows up even with a simple "deny ip any any" or "permit ip any any". I've found several articles similar to https://integratingit.wordpress.com/2021/06/26/ftd-control-plane-acl/ that show something that looks pretty much the same, although the FMC is used in lieu of FDM. Can anyone shed some light on this? Thanks
