topic Re: inspect icmp in Network Security

inspect icmp

steigja — Mon, 11 Mar 2019 13:46:48 GMT

While we are on the topic. Whenever I add the "fix protocol icmp" command on version 8.0 ASA 5520. My telnet session to the inside will no longer work. Is there anyway around that?

Re: inspect icmp

jj27 — Fri, 19 Sep 2008 17:13:48 GMT

What happens if you put in the command:

management-access inside

Re: inspect icmp

robertson.michael — Fri, 19 Sep 2008 20:34:38 GMT

The 'fixup protocol' commands were used in PIX 6.x code. In ASA 7.x and 8.x, this functionality has moved to the MPF.

To enable ICMP inspection in ASA 8.x, your config would look something like this:

class-map inspection_default

match default-inspection-traffic

policy-map global_policy

class inspection_default

inspect icmp

service-policy global_policy global

Also, for telnet access to the inside interface, you'll want to configure something like this:

telnet inside

Hope that helps.

-Mike

Re: inspect icmp

cisco24x7 — Sat, 20 Sep 2008 00:26:14 GMT

You still CAN enter "fixup protocol ftp 21"

on Pix 7.x and 8.x code. It will automatically

convert into Modular Policy Framework (MDF)

for you.

I didn't try "fixup protocol icmp" in version

8.x because my Pix firewall crashed but I

think it will work as well.