topic Re: Traceroute through Pix501 still not working... in Network Security https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975463#M939929 <HTML><HEAD></HEAD><BODY><P>on the outside access-list if you are permitting icmp any any then it covers all the icmp types</P><P></P><P>are you sure the upstream router not blocking any icmp type ?</P><P></P><P>does it work bypassing the pix ?</P></BODY></HTML> Wed, 02 Apr 2008 14:30:52 GMT abinjola 2008-04-02T14:30:52Z Traceroute through Pix501 still not working... https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975462#M939927 <P>Hi</P><P>I've got a pix 501 and I've permitted ALL icmp through the outside and inside access-lists, yet traceroute through this firewall still does not work, it just shows stars for all hops past the pix until the actual final destination. I've read a ton of info on this and everyone just says to allow ICMP time-exceeded and echo-reply which my permit icmp any any should cover, right? Anything else I should check? Thanks</P><P></P><P>Jason</P> Mon, 11 Mar 2019 12:25:56 GMT https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975462#M939927 jasonhumes 2019-03-11T12:25:56Z Re: Traceroute through Pix501 still not working... https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975463#M939929 <HTML><HEAD></HEAD><BODY><P>on the outside access-list if you are permitting icmp any any then it covers all the icmp types</P><P></P><P>are you sure the upstream router not blocking any icmp type ?</P><P></P><P>does it work bypassing the pix ?</P></BODY></HTML> Wed, 02 Apr 2008 14:30:52 GMT https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975463#M939929 abinjola 2008-04-02T14:30:52Z Re: Traceroute through Pix501 still not working... https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975464#M939930 <HTML><HEAD></HEAD><BODY><P>Great, thanks very much! It turns out one of our admins had blocked the icmp time-exceeded msg from the router between myself and the pix...so the pix was fine, but the router was breaking traceroute. Thanks!</P><P></P><P>Jason</P></BODY></HTML> Wed, 02 Apr 2008 14:45:06 GMT https://community.cisco.com/t5/network-security/traceroute-through-pix501-still-not-working/m-p/975464#M939930 jasonhumes 2008-04-02T14:45:06Z