Unable to ping from and to FirePower

[alex.vue]

Hi all,

I have a 5525x and wanted to setup the FirePower that comes with the ASA. I have read and followed the Cisco installation guide, but I am unable to access the FirePower module on the ASA. What I have done;

1. Installed FireSight Mangement --- (can ping internet, inside FW interface, and other host on a different subnet.)

2. FirePower module is configured with the same IP subnet as the inside firewall interface.

3. Management interface 'no nameif', no IP, and enabled on the same vlan as the inside interface.

FireSight Mgmt server is on VLAN101.

Management PC is on VLAN0101.

Inside FW interface is on VLAN2 (IP 192.168.2.251/24)

SFR is on VLAN2 (IP 192.168.2.249/24)

I am stuck, please help.

-Alex

[Philip D'Ath]

The Firepower module uses the external physical "Management" interface on the ASA.  Have you got this interface plugged in?

[alex.vue]

Yes, It is plugged in. Switch port is configured VLAN2. The interface status shows up/up.

[Philip D'Ath]

And you have definitely loaded FirePower software onto the module, or have logged into the module to verify that there is software installed on it?

[alex.vue]

Yes sir.

FYI, I can login from the Actually Firewall console, but I cannot login using its real ip.

For example,

- Login 192.168.2.251

- session sfr

[alex.vue]

I just want to update on the issue. I have placed a test machine on the same network as the SourceFire and I was able to access it. I am still unable to access from other VLAN.

Again, I can access the Firewall from other vlan which is on the same network as the SourceFire. But, I cannot access the SourceFire.

Thanks.

[alex.vue]

Log is also showing denied TCP inbound connection from the module IP to the FireSight mgmt. Server. I am not sure why it's being denied. ACL for Inside interface is configured by default to permit any to the lower security zone. I have also enabled the 'enable traffic between two or more interface which are configured with same security levels'.