topic Re: How to PING all ASA interfaces for monitoring in Network Security https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963939#M939999 <HTML><HEAD></HEAD><BODY><P>Hmm..some other rules must be blocking icmp to the interface in questioned.. do you see anything in asa logs when monitoring server attempts icmp on the interface?</P><P> </P><P></P><P>David post right argument.</P></BODY></HTML> Tue, 01 Apr 2008 11:19:23 GMT JORGE RODRIGUEZ 2008-04-01T11:19:23Z How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963935#M939995 <P>Hi All,</P><P></P><P>We want to ping all interfaces from an ASA from a monitoring server located in one Management DMZ.</P><P>It works fine for the interface directly connected to the monitoring server, but it fails for all others,</P><P></P><P>Any ideas on how to solve this issue ?</P><P></P><P>Thanks a lot.</P><P>Christian</P> Mon, 11 Mar 2019 12:25:19 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963935#M939995 christian.belkreir 2019-03-11T12:25:19Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963936#M939996 <HTML><HEAD></HEAD><BODY><P>you can try:</P><P>asa(config)#no imcp deny any <INTERFACE_NAME></INTERFACE_NAME></P><P></P><P></P><P>Rgds</P><P>Jorge </P></BODY></HTML> Tue, 01 Apr 2008 10:35:25 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963936#M939996 JORGE RODRIGUEZ 2008-04-01T10:35:25Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963937#M939997 <HTML><HEAD></HEAD><BODY><P>Thanks Jorge</P><P></P><P>But it doesn't solve the issue.</P><P>I've already permitted any ICMP on all interfaces and I've already put access rules that allow the monitoring server to do ICMP to all ASA interfaces.</P><P>This access rule is applied on the interface where the monitoring server resides.</P><P>I also enable the ICMP inspect option.</P><P></P><P>Any other ideas ?</P><P></P><P>Rgds,</P><P>Christian</P></BODY></HTML> Tue, 01 Apr 2008 10:52:01 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963937#M939997 christian.belkreir 2008-04-01T10:52:01Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963938#M939998 <HTML><HEAD></HEAD><BODY><P>That's the nature of Pix/ASA device. You can</P><P>NOT ping the far side of the interface from</P><P>the same machine. In other words, let say</P><P>your PC is connected to "inside" interface and</P><P>that you have "outside", "inside" and "dmz" on</P><P>the firewall. From that PC you will NOT be</P><P>able to ping the "outside" and "dmz" interface.</P><P>That's the way the firewall is designed. </P><P></P><P>I've asked for this feature way back in </P><P>version 5.1. That was seven years ago.</P><P></P><P>CCIE Security</P></BODY></HTML> Tue, 01 Apr 2008 11:17:26 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963938#M939998 cisco24x7 2008-04-01T11:17:26Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963939#M939999 <HTML><HEAD></HEAD><BODY><P>Hmm..some other rules must be blocking icmp to the interface in questioned.. do you see anything in asa logs when monitoring server attempts icmp on the interface?</P><P> </P><P></P><P>David post right argument.</P></BODY></HTML> Tue, 01 Apr 2008 11:19:23 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963939#M939999 JORGE RODRIGUEZ 2008-04-01T11:19:23Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963940#M940000 <HTML><HEAD></HEAD><BODY><P>Thanks a lot for this confirmation.</P></BODY></HTML> Tue, 01 Apr 2008 11:49:40 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963940#M940000 christian.belkreir 2008-04-01T11:49:40Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963941#M940001 <HTML><HEAD></HEAD><BODY><P>Same issue here!</P><P></P><P>One of my customer wants to do the exact same thing!&nbsp;&nbsp; From the inside interface, ping all dmz interfaces for monitoring...</P></BODY></HTML> Wed, 14 Apr 2010 04:20:46 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963941#M940001 Steve Rodrigue 2010-04-14T04:20:46Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963942#M940002 <HTML><HEAD></HEAD><BODY><P>Not supported on ASA/PIX to ping the opposite interfaces. You can only ping the directly connected ASA interfaces.</P></BODY></HTML> Wed, 14 Apr 2010 04:23:18 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963942#M940002 Jennifer Halim 2010-04-14T04:23:18Z Re: How to PING all ASA interfaces for monitoring https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963943#M940003 <HTML><HEAD></HEAD><BODY><P>Ok... So it's clear!</P><P></P><P>I'll inform my customer. We'll have to find a workaround.</P></BODY></HTML> Wed, 14 Apr 2010 04:31:13 GMT https://community.cisco.com/t5/network-security/how-to-ping-all-asa-interfaces-for-monitoring/m-p/963943#M940003 Steve Rodrigue 2010-04-14T04:31:13Z