Can't PING IP Address Route Firewall?

williammanurung — Fri, 21 Feb 2020 14:24:32 GMT

Hai guys,

I have asa with routed firewall mode.

and i have configured interface like this:

interface Port-channel2.3111
nameif OUTSIDE
security-level 0
ip address 1.1.1.1 255.255.255.0 standby 1.1.1.2

And what i still confused is, why 1.1.1.1 or 1.1.1.2 cannot ping from different segment?
I have no problem with routing in firewall

Re: Can't PING IP Address Route Firewall?

Flavio Miranda — Mon, 02 Oct 2017 12:49:59 GMT

Hello,

For security reason. When ping is disabled, a bunch of malicious tools can´t track you.

You can try enablig inspection and also permiting icmp.

policy-map global_policy
class inspection_default
inspect dns migrated_dns_map_1
inspect icmp

permit icmp OUTSIDE in