Can you tell me the command I can use to see how many packets are getting droped on my pix.
This command is 'show asp drop'. It will tell you all of the various reasons PIX/ASAs dropped packets. This info can be quite useful during troubleshooting because it can allow you to quickly ascertain a potential issue.
If you want to test whether specific traffic is getting through, create a capture like below.
define interesting traffic
access-list cap1 extended permit ip 220.127.116.11 255.255.255.255 18.104.22.168 255.255.255.255
create and apply capture
cap cap1 access-list cap1 interface outside
sho cap cap1
download capture (open w/ Ethereal)
*** Please rate if this helps ***
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: