topic ICMP and PIX Firewalls in Network Security https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087128#M878483 <P>Fundamental issue here - must be me - I have a laptop plugged into the inside interface of my pix firewall (Pix 501). I have set up an ACL to deny icmp echo and icmp echo-reply FROM the laptop address TO the ip address of the inside interface. I have applied the ACL to the inside interface via an access-group command ("in"). And I can still ping the inside interface of the firewall from the laptop still. Debug icmp trace shows no hits. What am I doing wrong? Surely you can deny icmp in this way ? </P> Mon, 11 Mar 2019 14:28:56 GMT peter-net 2019-03-11T14:28:56Z ICMP and PIX Firewalls https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087128#M878483 <P>Fundamental issue here - must be me - I have a laptop plugged into the inside interface of my pix firewall (Pix 501). I have set up an ACL to deny icmp echo and icmp echo-reply FROM the laptop address TO the ip address of the inside interface. I have applied the ACL to the inside interface via an access-group command ("in"). And I can still ping the inside interface of the firewall from the laptop still. Debug icmp trace shows no hits. What am I doing wrong? Surely you can deny icmp in this way ? </P> Mon, 11 Mar 2019 14:28:56 GMT https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087128#M878483 peter-net 2019-03-11T14:28:56Z Re: ICMP and PIX Firewalls https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087129#M878485 <HTML><HEAD></HEAD><BODY><P>Peter</P><P></P><P>acl's control traffic through the pix not to pix interfaces. Try</P><P></P><P>pix(config)# icmp deny any inside</P><P></P><P>Jon</P></BODY></HTML> Tue, 23 Dec 2008 14:35:14 GMT https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087129#M878485 Jon Marshall 2008-12-23T14:35:14Z Re: ICMP and PIX Firewalls https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087130#M878486 <HTML><HEAD></HEAD><BODY><P>cheers Jon - that makes sense to me</P></BODY></HTML> Tue, 23 Dec 2008 19:53:48 GMT https://community.cisco.com/t5/network-security/icmp-and-pix-firewalls/m-p/1087130#M878486 peter-net 2008-12-23T19:53:48Z