topic Enable ICMP response on OUTSIDE interface based on DNS in ASA in Network Security

Enable ICMP response on OUTSIDE interface based on DNS in ASA

rmcgurn — Tue, 12 Mar 2019 03:07:22 GMT

Hello All,

I have what I'm sure is a simple question, but is frustrating me. I'd like to enable ICMP response on the outside interface of my ASA's to respond to ICMP traffic that is sent from a specific DNS address (an external monitoring service). Any thoughts on how best to accomplish this? Thanks in advance.

Issue is the routable IP will change regularly, but the DNS address will remain the same. A pool of IPs basically. Thanks in advance,

Enable ICMP response on OUTSIDE interface based on DNS in ASA

jumora — Fri, 22 Nov 2013 03:57:19 GMT

Well ICMP is always allowed but ISP normally have what is called stick DNS, so my question would be, do you want to restric IP address from reaching the ASA via ICMP and only allow the DNS hosting site

Value our effort and rate the assistance!

Enable ICMP response on OUTSIDE interface based on DNS in ASA

Julio Carvajal — Fri, 22 Nov 2013 06:25:04 GMT

Hello Ronan,

So only ICMP responsed from outside from the Domain-Name of that host

Nah, I do not see this being possible on the ASA at the moment, you will need to use the IP pool as the only method to be restrictive.

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Enable ICMP response on OUTSIDE interface based on DNS in ASA

jumora — Sat, 23 Nov 2013 05:32:34 GMT

Need help????

Value our effort and rate the assistance!

Enable ICMP response on OUTSIDE interface based on DNS in ASA

rmcgurn — Wed, 27 Nov 2013 19:08:01 GMT

My sincere apologies for not replying sooner. I've been away and unable to respond quicker. Thank you very much for your quick answer. Looks like IP Pool is the way to go in this case. Once again, thank you.