https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544736#M206643 <P>&nbsp;</P><P>&nbsp;</P> Sun, 28 Sep 2014 09:48:57 GMT Hernán Figueroa 2014-09-28T09:48:57Z https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544735#M206642 <P>Hello guys, i need an help. Could you tell me If when i deny IP traffico towards an host &nbsp;i deny also icmp traffic?</P><P>Tanks gio</P> Tue, 12 Mar 2019 04:49:39 GMT https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544735#M206642 giovannibaldi 2019-03-12T04:49:39Z https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544736#M206643 <P>&nbsp;</P><P>&nbsp;</P> Sun, 28 Sep 2014 09:48:57 GMT https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544736#M206643 Hernán Figueroa 2014-09-28T09:48:57Z https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544737#M206644 <P>This is incorrect.&nbsp; the ICMP protocol is part of the IP protocol suite and is used to send error messages.&nbsp; So in denying IP you will also be denying ICMP.</P><P>But also keep in mind that the ICMP request and ICMP reply are two different flows and are not tracked in the state table of the ASA.&nbsp; So, if you are pinging from a device on a higher security level interface to a device on a lower security level interface the reply will be denied unless specifically permitted.</P><P>--</P><P>Please remember to select a correct answer and rate helpful posts</P> Sun, 28 Sep 2014 09:48:58 GMT https://community.cisco.com/t5/network-security/doubt-about-access-list/m-p/2544737#M206644 Marius Gunnerud 2014-09-28T09:48:58Z