block icmp never work on ASA 8.6

[Neetu Bhushan]

hi all,

i tried putting this on my ACL

access-list outside_access_in line 1 extended deny icmp any any echo

and write it on the flash.

but still i can ping my ip address.  my ASA version is 8.6.

thanks for any comment you may add.

[James Leinweber · Accepted solution]

The access-list plus access-group apply to traffic transiting through the ASA, not directed to the ASA itself.  To block icmp to the ASA use instead an icmp deny ... statement.

-- Jim Leinweber, WI State Lab of Hygiene

[Neetu Bhushan]

thanks i got it....

icmp deny any echo-reply outside

[Neetu Bhushan]

actually this also makes my pinging from inside to outside, not possible.

so this answer is not correct...