FirePower 1010 - Allow PPTP and GRE traffic

[IvanSH87]

I have a Cisco FirePower 1010, this firewall is between a internal network and the ISP router.
In the internal network, there is a computer that needs to connect to an external server by PPTP and GRE protocols.
I tried to create an access rule on the firewall to allow PPTP and GRE traffic but it didn't works.

Does someone knows which is the right way to create the rule that it is allow the PPTP and GRE traffic?

[balaji.bandi]

For testing add 1 Rule above 1 , Do only for that computer as source destination any any ( also any any application) and test is that works ?

Why i want to do this, to eliminate any other blockers may stopping in the network, If that works you can collect the logs, if this is not work, then FP is not that issue here. something on the north side device still blocking for the device to connect.

test and advise.

[IvanSH87]

Hi @balaji.bandi;

Thanks for answering; let me perform the test and I will notify you.

[Georg Pauwen]

Hello,

are you running ASA or FTD ?

[IvanSH87]

Hi @Georg Pauwen;

Thanks for answering, I am running FTD.

[Georg Pauwen]

Hello,

what if you change the rule actions from 'Allow' to 'Trust' ?

[IvanSH87]

I already tried that option, but it didn't work either