topic Traceroute Through PIX in Network Security https://community.cisco.com/t5/network-security/traceroute-through-pix/m-p/714529#M977194 <P>I have a PIX with PIXOS 7.1.</P><P>I issue a traceroute from the inside host to an outside host and find that all hops behind the pix can not be seen.</P><P>There is an interface pat between inside and outside.</P><P>I have already configured </P><P>access-list outside permit icmp any any</P><P>access-list inside permit icmp any any</P><P>inspect icmp</P><P>inspect icmp error</P><P>But it doesn't work.</P><P>Can anyone give me a clue?</P><P>Thanks very much.</P><P></P> Mon, 11 Mar 2019 10:38:25 GMT zywvip 2019-03-11T10:38:25Z Traceroute Through PIX https://community.cisco.com/t5/network-security/traceroute-through-pix/m-p/714529#M977194 <P>I have a PIX with PIXOS 7.1.</P><P>I issue a traceroute from the inside host to an outside host and find that all hops behind the pix can not be seen.</P><P>There is an interface pat between inside and outside.</P><P>I have already configured </P><P>access-list outside permit icmp any any</P><P>access-list inside permit icmp any any</P><P>inspect icmp</P><P>inspect icmp error</P><P>But it doesn't work.</P><P>Can anyone give me a clue?</P><P>Thanks very much.</P><P></P> Mon, 11 Mar 2019 10:38:25 GMT https://community.cisco.com/t5/network-security/traceroute-through-pix/m-p/714529#M977194 zywvip 2019-03-11T10:38:25Z Re: Traceroute Through PIX https://community.cisco.com/t5/network-security/traceroute-through-pix/m-p/714530#M977195 <HTML><HEAD></HEAD><BODY><P>try adding the following specific entries:</P><P></P><P>access-list outside permit icmp any any unreachable</P><P>access-list outside permit icmp any any time-exceeded</P><P>access-list outside permit icmp any any echo-reply</P><P></P><P>this assumes 'outside' is the acl applied to the outside interface.</P></BODY></HTML> Mon, 02 Jul 2007 14:42:05 GMT https://community.cisco.com/t5/network-security/traceroute-through-pix/m-p/714530#M977195 srue 2007-07-02T14:42:05Z