https://community.cisco.com/t5/network-security/ping-ftd-outside-interface-from-inside/m-p/3884124#M940685 <P>Even when all traffic is allowed I've noticed that I can't ping FTD interfaces except the "nearest" interface (traffic doesn't cross FTD).</P><P>Is it possible to allow this traffic?</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 21 Feb 2020 17:16:25 GMT ajtm 2020-02-21T17:16:25Z https://community.cisco.com/t5/network-security/ping-ftd-outside-interface-from-inside/m-p/3884124#M940685 <P>Even when all traffic is allowed I've noticed that I can't ping FTD interfaces except the "nearest" interface (traffic doesn't cross FTD).</P><P>Is it possible to allow this traffic?</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 21 Feb 2020 17:16:25 GMT https://community.cisco.com/t5/network-security/ping-ftd-outside-interface-from-inside/m-p/3884124#M940685 ajtm 2020-02-21T17:16:25Z https://community.cisco.com/t5/network-security/ping-ftd-outside-interface-from-inside/m-p/3884438#M940687 Hi<BR /><BR />You can only ping the interface from where the traffic comes in only.<BR />See documentation : <A href="https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/platform_settings_for_firepower_threat_defense.html#task_42BBA666CD604517ADA18B32CA162F62" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/platform_settings_for_firepower_threat_defense.html#task_42BBA666CD604517ADA18B32CA162F62</A><BR />"The Firepower Threat Defense device only responds to ICMP traffic sent to the interface that traffic comes in on; you cannot send ICMP traffic through an interface to a far interface."<BR /> Thu, 04 Jul 2019 02:54:07 GMT https://community.cisco.com/t5/network-security/ping-ftd-outside-interface-from-inside/m-p/3884438#M940687 Francesco Molino 2019-07-04T02:54:07Z