topic Re: FTD can't ping interface IP address in Network Security

FTD can't ping interface IP address

Support ACME — Fri, 05 Apr 2019 15:51:49 GMT

Dear ALL,

I'm configuring the FTD firewall as internal firewall, I have two interfaces for inside and outside network, the inside interface IP address is 192.168.100.1/24 and the outside network is 172.16.30.1/24.

I have allow all traffic in access control policy, now I can use the inside network 192.168.100.2 to ping 172.16.30.2, but i can't ping to 172.16.30.1( the interface IP), then from 172.16.30.2 ping to 192.168.100.2 is success, but ping to 192.168.100.1 are failed.

Anyone can help?

TungHo

Re: FTD can't ping interface IP address

GRANT3779 — Sun, 07 Apr 2019 11:42:59 GMT

Just so I understand, are you saying you can ping through the firewall from devices going in to out and vice versa? but unable to ping the actual firewall interface ip addresses?
Are you trying to ping the Outside interface IP from a device on the inside? Also, ping the inside interface ip from a device on the Outside?
On the ASA you cannot do this by design and it may be the same for FTD. I don't think you send icmp traffic via one interface, destined for another physical interface on the same device.

Re: FTD can't ping interface IP address

Support ACME — Mon, 08 Apr 2019 02:37:08 GMT

Dear GRANT3779,

thanks for your clarification.

TungHo

Re: FTD can't ping interface IP address

nabil-ahmad — Thu, 28 Nov 2024 05:35:39 GMT

This might be old, but I also have done lab testing and verified this is the right explanation by design