11-19-2015 06:48 AM - edited 03-11-2019 11:55 PM
I doubt that this can be done without contacting the isp, but a traceroute to my network shows the isp private ip addresses. Is there anything I can do on my ASA to still keep traceroute alive but block the private ip addresses?
11-22-2015 03:39 AM
Hi,
By Default , traceroute is blocked thru the ASA device.
Also , can you paste the output of traceroute and what do you want to block ?
ALso , mention the address of the ASA device ?
Thanks and Regards,
Vibhor Amrodia
11-23-2015 12:37 AM
I think you will have to contact your ISP. It is their devices that are responding to the ICMP requests. That is why the device doing the traceroute query can map every hop.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: