12-02-2021 05:28 AM
Hi
I'm playing with a few FTD managed by FMC (all latest 7.x version)
I'm trying to get my head round how sysopt-permit VPN works on the FTD.
On ASA it's a global settings, and the docs that I've found for FTD also seem to suggest it's a global settings.
But on the same device I can set it in multiple places - on each individual profile for: VPN> s2s>profile>advanced>tunnel>access control policy for decrypted traffic
And also in VPN>RA>access interfaces.
Turning it on or off in one doesn't seem to affect the others, and having it off in one and on in another seems to be unpredictable as to what happens.
So ... is sysopt permit-vpn now supposed to be a more granular thing or is this a gui fail?
12-02-2021 05:39 AM
how about doing in flexconfig as mentioned below :
12-03-2021 10:00 AM
I've found that having it off in any of the various places overrides turning it on in any the rest. Found that out the hard way when a VPN kept failing to work as I wanted.
12-06-2021 02:42 AM
Yes, I think this should go down as GUI bug. If it's a global setting, surely it should only be in one place - or at least if it's in multiple places, toggling it in one should affect all instances of that toggle box?
09-21-2023 08:26 AM
Is this issue is fixed ?
12-14-2023 09:39 AM
Still wondering if this issue is fixed yet?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide