topic Not able to ping in Network Security https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230247#M876259 <P>Hi all</P><P>I can ping to 195.229.249.x(outside network) ip from PIX, but I can't ping from the inside network.</P><P>The PIX config is attached</P><P>Please help</P><P>Thanks</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 14:51:38 GMT sudeesh79 2019-03-11T14:51:38Z Not able to ping https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230247#M876259 <P>Hi all</P><P>I can ping to 195.229.249.x(outside network) ip from PIX, but I can't ping from the inside network.</P><P>The PIX config is attached</P><P>Please help</P><P>Thanks</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 14:51:38 GMT https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230247#M876259 sudeesh79 2019-03-11T14:51:38Z Re: Not able to ping https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230248#M876263 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>On PIX ICMP isn't stateful so you need to add a rule for the reply traffic liek so</P><P></P><P>access-list 101 extended permit icmp any any echo-reply</P><P></P><P>You can also tie down the "any any" to the subnets in question (remembering this is the reply traffic!!!)</P><P></P><P></P><P>Thanks</P></BODY></HTML> Tue, 17 Feb 2009 12:57:37 GMT https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230248#M876263 JamesLuther 2009-02-17T12:57:37Z Re: Not able to ping https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230249#M876265 <HTML><HEAD></HEAD><BODY><P>hi,</P><P>By default from high security level to lower security level icmp will be blocked, u need to apply acl for the same.</P><P></P></BODY></HTML> Wed, 18 Feb 2009 09:52:40 GMT https://community.cisco.com/t5/network-security/not-able-to-ping/m-p/1230249#M876265 ciscosrini369 2009-02-18T09:52:40Z