Cisco Firepower 2110 Threat Defense Cofiguration

[RafaelG]

Hello everyone,

I’m trying to grant webclient access to the PBX from outside. Most of the information I'm getting to configure the firewall is related to Cisco ASA, but I'm dealing with a Cisco Firepower 2110 Threat Defense. I have run a firewall checker and I was able to resolve the SIP ALG detected, however, I’m receiving a “Mapping does not match 5060” port error. Has someone successfully configured a FTD?

PD: Internally, the webclient interface works just fine!

Thanks in advance,
Rafael

 

[VasilisV_3CX]

Hi @RafaelG,

We have some information about how the Firewall Checker works here. It may help you understand what is going wrong. I suspect that something might be remapping the source ports.

Also, if the doc above is trivial, then you could also ask you Cisco Firewall vendor to help configure the behavior that you want.