topic Re: ping outside of pix in Network Security

ping outside of pix

oevans — Fri, 21 Feb 2020 06:00:05 GMT

Is there a way you can configure the pix to

ping the outside interface? Not that you would

want to do it..

Thanks

Re: ping outside of pix

shen.lu — Wed, 13 Mar 2002 15:04:50 GMT

Do you mean to open ICMP port so that you can ping through Firewall?

Re: ping outside of pix

oevans — Wed, 13 Mar 2002 15:18:45 GMT

Not ping through the firewall, but ping the outside

interface of the firewall.

Thanks

Re: ping outside of pix

shen.lu — Wed, 13 Mar 2002 15:49:24 GMT

When you ping the outside interface of the firewall, what error message do you get?

Re: ping outside of pix

g.rodegari — Wed, 13 Mar 2002 17:04:02 GMT

icmp permit outside sou_net sou_subnet type_icmp

but is permitted by default ?!?!?

Re: ping outside of pix

neil.barrett — Thu, 14 Mar 2002 08:15:42 GMT

I have been informed by my suppliers that it is a "feature" of the PIX firewall that it will only allow you to ping the interface that you are connected to e.g. inside and no other interface (I come from a router background and assumed you could do this - it took me a while to discover this).

There is no way that I know of that will let you do this. One way round it would be to connect to an external device (e.g. router) and try and ping backwards - as long as you access list allows icmp echo reply on that interface.

Hope this helps,

Neil.