topic Re: pix 520 in Network Security

pix 520

teltac — Fri, 21 Feb 2020 07:02:21 GMT

Hello,

i have a pix firewall running 5.1(4) , equipped with three interfaces ( inside ,outside ,dmz).

Two access lists have been created in order to let outside access inside andthey are ok :one on the outside interface ( direction in ) and another one on the DMZ interface ( direction in ) ,

i want to permit icmp traffic flowing through my pix interfaces

i have added the command:

conduit permit icmp any any echo-reply and still not able to ping ,

then i have added the command :access-list name permit icmp any any and applied to my outside and DMZ INTERFACE , and still have the same problem

any one could help

Thanks

Ali

Re: pix 520

ovieira — Mon, 13 Oct 2003 09:48:47 GMT

Hi!

Can you please be more specific? What is the source and destination of your pings?

Regards

Re: pix 520

teltac — Mon, 13 Oct 2003 14:17:22 GMT

Hello,

from a pc onthe inside pix firewall interface ,i want to ping a station on the outside interface ,

or from a pc on the dmz interface i want to ping a station on the outside or the inside interface .

in brief i want to allow icmp traffic to flow through my pix interfaces.

Regards,

Ali.

Re: pix 520

ovieira — Fri, 17 Oct 2003 17:38:41 GMT

Hi!

Can i assume that all other traffic (IP, TCP or UDP) from INSIDE or DMZ hosts to OUTSIDE work fine and only ICMP is not working?

Use the "debug icmp trace" pix command and paste the output in here, if that's ok with you.

Regards