FTD · TROUBLESHOOTING

Troubleshoot FTD: the policy looks right, and nothing works

Someone built this policy and went home. PC1 can’t reach the internet, and the manager’s screens look nearly right. There are three faults: one in the rules, one in the routes, and one in what the firewall is actually running.

Cisco FTD-style track · Cisco FTD-style, FTD Manager · 4 objectives

Open in simulator More Cisco FTD-style labs

Objectives

The simulator ticks each one as soon as the network meets it.

A block rule sits above the allow rule, and the first match wins: move INSIDE-OUT to the top.
The default route points to 203.0.113.9, which does not exist: it must go to 203.0.113.2.
The Deploy screen says Pending: the last fixes never reached the firewall. Deploy. show access-list on FTD1 has the rules in the new order.
PC1 reaches 198.51.100.1.

Start this lab