topic ASA 8.4 Access-List Help in Network Security https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058005#M396143 <P>Hello, I am working on an ASA 5510 on 8.4 IOS and need to know how to limit icmp to just a single host? What I would like to do is be able to PING from the Inside interface 10.X.X.X to host 4.2.2.2 on the Outside, but thats it no other host would be PINGable.</P><P></P><P>I tried MANY different access-list statements but the only way I can get icmp out and working is using the "fixup protocol icmp" but then everything is PINGable and the ASA does not block anything.</P><P></P><P>Any help would be great!!!</P><P></P><P>Thanks!</P> Tue, 12 Mar 2019 00:18:27 GMT wolfunr04 2019-03-12T00:18:27Z ASA 8.4 Access-List Help https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058005#M396143 <P>Hello, I am working on an ASA 5510 on 8.4 IOS and need to know how to limit icmp to just a single host? What I would like to do is be able to PING from the Inside interface 10.X.X.X to host 4.2.2.2 on the Outside, but thats it no other host would be PINGable.</P><P></P><P>I tried MANY different access-list statements but the only way I can get icmp out and working is using the "fixup protocol icmp" but then everything is PINGable and the ASA does not block anything.</P><P></P><P>Any help would be great!!!</P><P></P><P>Thanks!</P> Tue, 12 Mar 2019 00:18:27 GMT https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058005#M396143 wolfunr04 2019-03-12T00:18:27Z ASA 8.4 Access-List Help https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058006#M396144 <HTML><HEAD></HEAD><BODY><P>Hello Scott,</P><P></P><P>Do fixup protocol icmp</P><P></P><P>access-list inside_in permit icmp host 10.x.x.x host 4.2.2.2</P><P>access-list inside_in deny icmp any any</P><P>access-list inside_in permit ip any any</P><P></P><P>access-group inside_in in interface inside</P><P></P><P>Regards,</P></BODY></HTML> Sat, 03 Nov 2012 05:27:54 GMT https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058006#M396144 Julio Carvajal 2012-11-03T05:27:54Z ASA 8.4 Access-List Help https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058007#M396145 <HTML><HEAD></HEAD><BODY><P>You are great! Thanks so much!!!!!!!!!</P></BODY></HTML> Sat, 03 Nov 2012 05:34:13 GMT https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058007#M396145 wolfunr04 2012-11-03T05:34:13Z ASA 8.4 Access-List Help https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058008#M396146 <HTML><HEAD></HEAD><BODY><P>Hey Scott a pleasure to help <SPAN __jive_emoticon_name="grin" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/grin.gif"></SPAN></P><P></P><P>Regards,</P><P></P><P>Julio</P></BODY></HTML> Sat, 03 Nov 2012 05:40:12 GMT https://community.cisco.com/t5/network-security/asa-8-4-access-list-help/m-p/2058008#M396146 Julio Carvajal 2012-11-03T05:40:12Z