Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The workaround will "work," but creates some other problems, and of course bloats your configs. As of 9.18(2), it's possible to add a loopback interface, to handle the management functions through VPN, not complete yet, but it's a start. Seems to w...
Same issue with a FPR-1010 in my lab with 9.18.2, it denies several services, and throws this into the log:106016: Deny IP spoof from (x.x.x.x) to y.y.y.y on interface outside.
Well, I've found on "solution."Since Cisco doesn't think this is important, I bought a couple of Juniper SRX's, these, remarkably, work just fine. Looks like a migration is on the way...
The workaround isn't really a workaround. Can confirm the issue on 9.16(2)14. When using monitoring, the "workaround" denies other traffic to inside interface, from the monitoring host. Also creating route-injection issues. It might work on very s...