Allow NOOP packets through a ASA5505

[rayleask1]

We have two private subnets protected with ASA5505s.  A poorly written application using ICMP and FTP produces NOOP packets and understandibly the Firewalls drop this traffic.  Is it possible to configure the ASA5505 temporarily to confirm the problem we have with the App?  I know its possible to configure a PIX for this.

Thanks, Ray

[Panos Kampanakis]

You can open up icmp in the inside and outisde ACLs to and from the ftp server and allow all ip traffic from the FT server.

Then disable the ftp and icmp inspection.

Try again to see if the app works.

I hope it helps.

PK