topic Re: Uable to ping any outside IP addresses, but can browse the w in Network Security

Uable to ping any outside IP addresses, but can browse the web.

davidwu2007 — Mon, 11 Mar 2019 11:15:40 GMT

I found that PCs behind the ASA 5510 are not able to ping any outside ip addresses including the firewall's outside NIC ip. However, users are able to browse any websites as usual. I am new to cisco's firewall. Could someone advise

me on how to troubleshoot this problem? Thank you!

Re: Uable to ping any outside IP addresses, but can browse the w

servdesktvwb — Mon, 24 Sep 2007 07:09:53 GMT

Check your ACL on the outside interface. You need to allow icmp echo, echo-reply and time-exceeded to be able to ping devices on the outside interface. Probably you just allow HTTP traffic... If you'r not sure, paste the ACL's here.

Re: Uable to ping any outside IP addresses, but can browse the w

kevin.jones1 — Tue, 25 Sep 2007 13:58:36 GMT

Pix, by design, will allow EVERYTHING from

the inside to outside. However, almost

ALL return traffics will be allowed with

the exception of echo-reply, time-exceeded,

icmp protocol. That's why user(s) on the

inside can browse the internet and do

whatever they desire.

Pix, ASA or whatever cisco called it,

it probably the worst security product

ever designed by man, IMHO.