Cisco 1010 FTD How to Allow ICMP and DNS resolution for Cisco.com

[timr1]

Question:

For the Cisco 1010 FTD utilizing the FDM, what is the process to Allow ICMP and DNS resolution for Cisco.com on the Outside interface?  This is related to the workaround for Cisco Bug: CSCvz32452.
Thanks in advance,

G

[balaji.bandi]

First are you effected with that bug ? from FTD are you able to ping cisco.com ?

create ACP rule for the same as suggested ? what is the difficulties you have to create one ?

[timr1]

Hi BB,

Yes, affected by the bug and utilized the workaround to resolve.

Thanks for your reply!

[EvanC75]

Can you provide the steps for the workaround?  I am not understanding the bug article.  It just says to allow icmp and dns resolution to cisco.com.  I assume the icmp part is a flexconfig object "icmp permit host cisco.com outside" but how do you allow dns resolution to cisco.com from the outside interface?