ASA 9.12(2) 5516-X
I just want to be able to ping the IP addresses assigned to my external interfaces. Each outside interface is a /29 subnet with an IP and a gateway in that subnet. I can ping the gateway IPs from inside, but not the IP of the interface itself. Each one of the gateway IP addresses is in the routing table as they all have "route outside-intx 0.0.0.0 0.0.0.0 $gateway_ip" entries with different metrics or policy maps to guide traffic. When I run a packet tracer for ping or ICMP from inside to any outside interface IP I get no route found, which is true. There is no route to that /29 subnet applied to the external interface, there is only a static route created that I just mentioned earlier.....and you can't apply a netmask to that. Seems like this should be easy, so I'm likely just missing something (obviously).
I do have ICMP inspection on and allow ICMP to the external interfaces from "any" (yes, the evil Internet can ping my firewall).
So how can I allow ICMP traffic from my inside (sec level 100) to the IP addresses assigned to my outside interfaces (sec level 0)?
Just to be clear, it's multi-WAN setup with multiple external interfaces.