topic I saw one inspection though, in Network Security

what includes ip service

TECH-JEFF — Tue, 12 Mar 2019 07:27:30 GMT

Hi, just want to know further regarding service "ip" in Cisco ASA. I was advised from my previous thread that this includes ICMP or ping. In my access rules, I've already set all rules to be ip as the service but for some reason, our internal IP's is unable to ping our WAN IP block.

Are there any other things I need to check on?

Thanks

Jeff

Hi Jeff,

Kanwaljeet Singh — Wed, 09 Mar 2016 02:44:43 GMT

Hi Jeff,

IP should include TCP, UDP OR ICMP in this case but not everything is allowed or will work by just allowing it in ACL. Some traffic is controlled by ASA differently. Somethings may require special handling like inspection. Do you have ICMP inspection enabled?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Thanks for the input, that is

TECH-JEFF — Wed, 09 Mar 2016 02:46:42 GMT

Thanks for the input, that is something I haven't check. Will get back to you and will try to check that now.

Thanks

Jeff

I saw one inspection though,

TECH-JEFF — Wed, 09 Mar 2016 02:52:02 GMT

I saw one inspection though, it just checks the DNS box, so I assume it just inspects DNS. But when I try to add ICMP and ticked this box, still not able to ping other IP's in our WAN.

FYI, tried pinging the ip block outside the network like 3G or via mobile, its pingable.

Thanks

Jeff