topic Re: ASA 5505 disable ping reply in Network Security https://community.cisco.com/t5/network-security/asa-5505-disable-ping-reply/m-p/729548#M1003892 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>For your asa you need to deny ping replies from the outside interface. Attached is a link that explains how the asa responds to ping and how to deny it </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f9fd.html#wp1631466" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f9fd.html#wp1631466</A></P><P></P><P>As for the 1.1.1.y that is presumably the upstream router from your asa. There is nothing you can do on the asa to stop this responding to pings. You need to log onto the router and use an access-list to prevent this happening</P><P></P><P>The router might be managed by your ISP. If so you need to talk to them but they may well require it for troubleshooting purposes. </P><P></P><P>HTH</P><P></P><P>Jon</P></BODY></HTML> Sun, 03 Jun 2007 07:22:20 GMT Jon Marshall 2007-06-03T07:22:20Z ASA 5505 disable ping reply https://community.cisco.com/t5/network-security/asa-5505-disable-ping-reply/m-p/729547#M1003890 <P>when my pix failed I switch over rapidly to a asa 5505 </P><P></P><P>two of my external ip address say 1.1.1.x and 1.1.1.y are replying to ping replies from the internet. one address is used in my outside interface and the other is used in my route outside command </P><P></P><P>interface Vlan2 </P><P>nameif outside </P><P>security-level 0 </P><P>ip address 1.1.1.x 255.255.x.y </P><P></P><P>te outside 0.0.0.0 0.0.0.0 1.1.1.y 1 </P> Mon, 11 Mar 2019 10:23:52 GMT https://community.cisco.com/t5/network-security/asa-5505-disable-ping-reply/m-p/729547#M1003890 casternj1 2019-03-11T10:23:52Z Re: ASA 5505 disable ping reply https://community.cisco.com/t5/network-security/asa-5505-disable-ping-reply/m-p/729548#M1003892 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>For your asa you need to deny ping replies from the outside interface. Attached is a link that explains how the asa responds to ping and how to deny it </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f9fd.html#wp1631466" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f9fd.html#wp1631466</A></P><P></P><P>As for the 1.1.1.y that is presumably the upstream router from your asa. There is nothing you can do on the asa to stop this responding to pings. You need to log onto the router and use an access-list to prevent this happening</P><P></P><P>The router might be managed by your ISP. If so you need to talk to them but they may well require it for troubleshooting purposes. </P><P></P><P>HTH</P><P></P><P>Jon</P></BODY></HTML> Sun, 03 Jun 2007 07:22:20 GMT https://community.cisco.com/t5/network-security/asa-5505-disable-ping-reply/m-p/729548#M1003892 Jon Marshall 2007-06-03T07:22:20Z