Cisco FTD Anyconnect

[sadist001]

Hello,

We have a problem with our Cisco FTD (6.6.4).

When user connects to the Anyconnect, which is terminated on the FTD (Outside Zone), he can't access to the server(Inside Zone). Route is correct, Access Control Policy also permit this traffic. When user tries to connect to the server, FTD direct this traffic to incorrect interface. What is the problem? 

 

[Rob Ingram]

@sadist001 do you have a NAT exemption rule to ensure traffic is not unintentially translated?

Please run packet-tracer from the CLI to simulate the RAVPN user traffic flow and provide the output for review.

[sadist001]

Yes, NAT Exemption done. I will collect traffic later and show result.

[sadist001]

Problem has solved, I have incorrectly added NAT Policy