Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We run FTDv HA pair managed by FMC on a 4-node vSAN cluster. Started noticing that VMs on the node where active FTD resides cannot establish TCP sessions (HTTPS, RDP) to resources in the same VLAN, while ICMP works fine. Moving VM to another node fix...
Looks like I’ve found the root cause. With promiscuous mode, the FTD gets copies of traffic between other VMs on the same host and routes them back out the same interface. The SYN copy hits the default deny and is dropped silently. The SYN-ACK copy m...
