https://community.cisco.com/t5/network-security/asa-firewall-interface-ping/m-p/2869424#M155100 <P>I have setup ASA 5525 firewall with inside, outside and DMZ.</P> <P>From inside PC, I can ping the inside interface of the firewall, from DMZ system I can ping the DMZ interface of the firewall.</P> <P>But from inside PC, I can not ping the DMZ interface, also from DMZ PC, I can not ping the inside interface of the firewall.</P> <P>I have disabled anti-spoofing, ICMP is full allowed with icmp inspection. What else do I need to allow?</P> Tue, 12 Mar 2019 07:34:34 GMT QUARK TARO 2019-03-12T07:34:34Z https://community.cisco.com/t5/network-security/asa-firewall-interface-ping/m-p/2869424#M155100 <P>I have setup ASA 5525 firewall with inside, outside and DMZ.</P> <P>From inside PC, I can ping the inside interface of the firewall, from DMZ system I can ping the DMZ interface of the firewall.</P> <P>But from inside PC, I can not ping the DMZ interface, also from DMZ PC, I can not ping the inside interface of the firewall.</P> <P>I have disabled anti-spoofing, ICMP is full allowed with icmp inspection. What else do I need to allow?</P> Tue, 12 Mar 2019 07:34:34 GMT https://community.cisco.com/t5/network-security/asa-firewall-interface-ping/m-p/2869424#M155100 QUARK TARO 2019-03-12T07:34:34Z https://community.cisco.com/t5/network-security/asa-firewall-interface-ping/m-p/2869425#M155101 <P>This is by design.&nbsp; You will never be able to ping an ASA interface that is not the ingress interface.&nbsp; There is no way around this.</P> <P>--</P> <P>Please remember to select a correct answer and rate helpful posts</P> Mon, 04 Apr 2016 05:58:13 GMT https://community.cisco.com/t5/network-security/asa-firewall-interface-ping/m-p/2869425#M155101 Marius Gunnerud 2016-04-04T05:58:13Z