TCP/UDP port whitelisting in cisco FTD

[King_1988]

Hello Guys,

Is there any way to whitelisting TCP/UDP port from Cisco FTD? From the connection events we saw that some of the specific ports are being blocked. 

[Francesco Molino]

Hi

You'll need to create a rule (prefilter or ACP) to allow these ports.

Are they blocked because denied by a specific or default rule, or blocked traffic blocked by snort process?

[King_1988]

Dear Molino,

Thanks for your reply.

Do you have any related document or can you share the steps of doing this?

[King_1988]

Dear Molino,

It is blocked by SNORT Process.

Do you have any related document or could you share the steps of doing this?

[Francesco Molino]

Are you using FMC? If so, while going into advanced troubleshooting menu on your device, you can do a capture with trace and share the output.

Or you can go over CLI and type in system support trace, try your communication and share the output of the trace you got from CLI.

[balaji.bandi]

have you looked at the logs, is any IPS get involved ?

check below URL help you :

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/fdm/fptd-fdm-config-guide-610/fptd-fdm-access.html