04-24-2013 08:25 PM - edited 02-21-2020 04:52 AM
hi all,
i tried putting this on my ACL
access-list outside_access_in line 1 extended deny icmp any any echo
and write it on the flash.
but still i can ping my ip address. my ASA version is 8.6.
thanks for any comment you may add.
Solved! Go to Solution.
04-25-2013 10:08 AM
The access-list plus access-group apply to traffic transiting through the ASA, not directed to the ASA itself. To block icmp to the ASA use instead an icmp deny ... statement.
-- Jim Leinweber, WI State Lab of Hygiene
04-25-2013 10:08 AM
The access-list plus access-group apply to traffic transiting through the ASA, not directed to the ASA itself. To block icmp to the ASA use instead an icmp deny ... statement.
-- Jim Leinweber, WI State Lab of Hygiene
04-25-2013 01:48 PM
thanks i got it....
icmp deny any echo-reply outside
04-29-2013 09:56 AM
actually this also makes my pinging from inside to outside, not possible.
so this answer is not correct...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide