ping outside of pix

[oevans]

Is there a way you can configure the pix to

ping the outside interface? Not that you would

want to do it..

Thanks

[shen.lu]

Do you mean to open ICMP port so that you can ping through Firewall?

[oevans]

Not ping through the firewall, but ping the outside

interface of the firewall.

Thanks

[shen.lu]

When you ping the outside interface of the firewall, what error message do you get?

[g.rodegari]

icmp permit outside sou_net sou_subnet type_icmp

but is permitted by default ?!?!?

[neil.barrett]

I have been informed by my suppliers that it is a "feature" of the PIX firewall that it will only allow you to ping the interface that you are connected to e.g. inside and no other interface (I come from a router background and assumed you could do this - it took me a while to discover this).

There is no way that I know of that will let you do this. One way round it would be to connect to an external device (e.g. router) and try and ping backwards - as long as you access list allows icmp echo reply on that interface.

Hope this helps,

Neil.