https://community.cisco.com/t5/network-security/web-server-under-pix/m-p/158407#M604587 <P>My web server is alive and sitting behind PIX.</P><P>How to set on the firewall inorder to allow the outside users able to send the echo-reply to the web server and get a reply.By default the firewall doesn;t allow the echo reply on the webserver since I only only www trafic for the server.</P><P></P><P></P> Fri, 21 Feb 2020 06:48:10 GMT ddicky 2020-02-21T06:48:10Z https://community.cisco.com/t5/network-security/web-server-under-pix/m-p/158407#M604587 <P>My web server is alive and sitting behind PIX.</P><P>How to set on the firewall inorder to allow the outside users able to send the echo-reply to the web server and get a reply.By default the firewall doesn;t allow the echo reply on the webserver since I only only www trafic for the server.</P><P></P><P></P> Fri, 21 Feb 2020 06:48:10 GMT https://community.cisco.com/t5/network-security/web-server-under-pix/m-p/158407#M604587 ddicky 2020-02-21T06:48:10Z https://community.cisco.com/t5/network-security/web-server-under-pix/m-p/158408#M604588 <HTML><HEAD></HEAD><BODY><P>Simply apply a statement in the outside interface's access-list for icmp traffic to whatever registered IP address you've assigned the web server in the static nat.</P><P></P><P>Ie.</P><P></P><P>access-list 101 permit icmp any host 200.1.1.5 echo</P><P>access-group 101 in interface outside</P><P></P><P>Check out this URL as well regarding the icmp uses, both with an ACL and with the icmp permit/deny command for pinging the Pix's own interfaces.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/warp/customer/110/31.html" target="_blank">http://www.cisco.com/warp/customer/110/31.html</A></P><P></P><P></P></BODY></HTML> Fri, 13 Jun 2003 10:56:29 GMT https://community.cisco.com/t5/network-security/web-server-under-pix/m-p/158408#M604588 abertram 2003-06-13T10:56:29Z