Can not traceroute on Pix 7.0

[susanto_leman]

Hi All,

I just tried to upgrade pix 515 to image version 7.0. Apparently It doesnt allow traceroute. I have opened icmp and traceroute for any any for inside and outside interfaces. but it doesnt help. any idea why that is so ?

-thanks-

[nkhawaja]

have you tried opening up udp?

try no fixup icmp error

[susanto_leman]

hi,

thanks for you reply.. what I did was

i added "fixup icmp" "inspect icmp" and "inspect icmp error"

thanks alot