ping google.com (ASA blocks reply)

kcaporaso — Mon, 11 Mar 2019 11:14:17 GMT

Howdy!

I'm slowly getting my ASA 5505 up to speed here and had a question about ping traffic.

I'd like to be able to ping external hosts (e.g. google.com) from behind my ASA 5505.

Which ACL or NAT do I need to allow the icmp packet to be returned to the pinging initiator (inside host).

Example: (inside host)

192.168.1.2>ping google.com

Pinging google.com [72.14.207.99] with 32 bytes of data:

Request timed out.

Hopefully, we can knock this out without me posting my running-config.

🙂

TIA, Kevin

Re: ping google.com (ASA blocks reply)

srue — Thu, 20 Sep 2007 16:34:24 GMT

enable icmp inspection..

or, on your inbound acl, allow icmp echo-replies

kcaporaso — Thu, 20 Sep 2007 16:38:28 GMT

enable icmp inspection was it!

Thanks srue!