topic Return Ping Packets blocked by Pix Firewall in Network Security https://community.cisco.com/t5/network-security/return-ping-packets-blocked-by-pix-firewall/m-p/1509939#M613086 <P>Hi Guys,</P><P></P><P>I have a rule from inside interface (security 100) to ping a server on a DMZ interface (secuirty 40). But I dont have the same rule other way around (from dmz to inside). When I do a ping the return ping packet from DMZ interface is dropped by the firewall.</P><P></P><P>Any idea why? Do I really need a rule for return ping traffic as well.</P><P></P><P>Tks </P> Mon, 11 Mar 2019 18:32:29 GMT kuldeep.kaur 2019-03-11T18:32:29Z Return Ping Packets blocked by Pix Firewall https://community.cisco.com/t5/network-security/return-ping-packets-blocked-by-pix-firewall/m-p/1509939#M613086 <P>Hi Guys,</P><P></P><P>I have a rule from inside interface (security 100) to ping a server on a DMZ interface (secuirty 40). But I dont have the same rule other way around (from dmz to inside). When I do a ping the return ping packet from DMZ interface is dropped by the firewall.</P><P></P><P>Any idea why? Do I really need a rule for return ping traffic as well.</P><P></P><P>Tks </P> Mon, 11 Mar 2019 18:32:29 GMT https://community.cisco.com/t5/network-security/return-ping-packets-blocked-by-pix-firewall/m-p/1509939#M613086 kuldeep.kaur 2019-03-11T18:32:29Z Re: Return Ping Packets blocked by Pix Firewall https://community.cisco.com/t5/network-security/return-ping-packets-blocked-by-pix-firewall/m-p/1509940#M613087 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>What code version you are running? With ICMP packet in each direction is</P><P>treated as a separate flow. If you have not enabled ICMP inspection (or icmp</P><P>fixup) then the firewall will drop the return icmp traffic. In that case,</P><P>you need to exclusively allow return ICMP traffic through access-lists.</P><P></P><P>http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note0918</P><P>6a0080094e8a.shtml</P><P></P><P>Hope this helps.</P><P></P><P>Regards,</P><P></P><P>NT</P></BODY></HTML> Tue, 31 Aug 2010 01:03:22 GMT https://community.cisco.com/t5/network-security/return-ping-packets-blocked-by-pix-firewall/m-p/1509940#M613087 Nagaraja Thanthry 2010-08-31T01:03:22Z