Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ACL debug

Hello,

what is the difference between:

1) %FW-6-DROP_PKT: Dropping tcp pkt ....

and

2) %SEC-6-IPACCESSLOGP: .....

I know that 2) is about a packet matching an ACL, but 1) I can't figure what is it becouse I can't find any ACL rule that is droping my packet.

thank u

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ACL debug

1) %FW-6-DROP_PKT: Dropping tcp pkt

The above is about IP inspect dropping the pkt, you must have IP inspect/IOS firewall turned on

1 REPLY
Cisco Employee

Re: ACL debug

1) %FW-6-DROP_PKT: Dropping tcp pkt

The above is about IP inspect dropping the pkt, you must have IP inspect/IOS firewall turned on

132
Views
0
Helpful
1
Replies
CreatePlease to create content