topic Re: Unable to ping from inside network to outside network in Network Security https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966721#M937606 <HTML><HEAD></HEAD><BODY><P>It is not stateful for icmp traffic. You must explicitly allow it in an acl or enable icmp inspection. The ASA is acting as it should.</P></BODY></HTML> Fri, 16 May 2008 15:42:03 GMT acomiskey 2008-05-16T15:42:03Z Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966720#M937603 <P>Hi, the ping initiated from inside network to outside hosts is dropping on outside interface. If i add acl entry to allow icmp on outside interface, ping is fin but this is asa 5540 (statefull firewall) that should remember connection initiated from inside network. This is production firewall used to allow internet surfing which works ok. Any idea where to start troublehoting would be greatly appreciated.</P> Mon, 11 Mar 2019 12:46:14 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966720#M937603 Dragan Milojevic 2019-03-11T12:46:14Z Re: Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966721#M937606 <HTML><HEAD></HEAD><BODY><P>It is not stateful for icmp traffic. You must explicitly allow it in an acl or enable icmp inspection. The ASA is acting as it should.</P></BODY></HTML> Fri, 16 May 2008 15:42:03 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966721#M937606 acomiskey 2008-05-16T15:42:03Z Re: Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966722#M937610 <HTML><HEAD></HEAD><BODY><P>read this:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml</A></P><P></P><P>it covers both icmp and traceroute issues through your firewall.</P></BODY></HTML> Fri, 16 May 2008 18:30:36 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966722#M937610 srue 2008-05-16T18:30:36Z Re: Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966723#M937612 <HTML><HEAD></HEAD><BODY><P>Thank you gents.</P><P>I like ASA more and more..</P><P></P><P>Regards, </P></BODY></HTML> Fri, 16 May 2008 19:26:28 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966723#M937612 Dragan Milojevic 2008-05-16T19:26:28Z Re: Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966724#M937613 <HTML><HEAD></HEAD><BODY><P>If you want to enable stateful ICMP inspection you can do this from global config</P><P></P><P>Type</P><P>policy-map global_policy</P><P> class inspection_default</P><P></P><P>inspect icmp</P><P></P><P></P></BODY></HTML> Tue, 20 May 2008 00:39:48 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966724#M937613 vabruno 2008-05-20T00:39:48Z Re: Unable to ping from inside network to outside network https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966725#M937615 <HTML><HEAD></HEAD><BODY><P>Thank you all for prompt response; i setup asa as per cisco's doc (15246) and it is OK now.</P><P></P><P></P></BODY></HTML> Tue, 20 May 2008 20:55:54 GMT https://community.cisco.com/t5/network-security/unable-to-ping-from-inside-network-to-outside-network/m-p/966725#M937615 Dragan Milojevic 2008-05-20T20:55:54Z