About Shomi

Shomi · 01-31-2024

Hi all,I'm fairly new to Cisco FTD so I'm wondering if anyone here can help me with an issue I'm currently having on my network. I can't seem to be able to reach a server via port 80/HTTP and I can see the traffic hitting my firewall rule "test-acp-r...

Shomi · 02-04-2024

Hi @Marius Gunnerud. Thank you for your input but it's not a firewall DNS or FQDN issue in this case, rather it appears it's a bug as detailed in the article shared above by tvotna.

Shomi · 02-04-2024

Hi @tvotna thank you for your input. We changed the FQDNs to their corresponding IPs and the service is working so it appears it's a bug as detailed in CSCwh64784 which you have shared. Thank you for your help.

Shomi · 01-31-2024

Hi @tvotna thanks for your input. This is a bit of a weird one. We changed the FQDN in the policy to it's real IP address and that works but the problem is we need to keep the FQDN because the IP addresses are potentially changeable. Any thoughts why...

Shomi · 01-31-2024

Hi @MHM Cisco World 1. This NONAT rule is not required and will be removed because it's not a VPN traffic2. packet-tracer input cloud-1 tcp 172.16.10.1 1234 192.168.100.10 80 detailedMany thanksShomi

Member Since	‎01-31-2024 03:53 AM
Date Last Visited	‎06-24-2024 11:22 PM
Posts	5

User Statistics

User Activity

Packet being dropped by Snort in FTD despite hitting valid policy

Re: Packet being dropped by Snort in FTD despite hitting valid policy

Re: Packet being dropped by Snort in FTD despite hitting valid policy

Re: Packet being dropped by Snort in FTD despite hitting valid policy

Re: Packet being dropped by Snort in FTD despite hitting valid policy