Scenario is that i cant ping a server on the dmz between two firewalls

[ohareka70]

Hello,

Scenario is that i cant ping a server on the dmz between two firewalls

I have a server on the dmz on cisco asa and it needs to ping a server on the dmz on the checkpoint network

dmz on cisco asa then goes to corporate network on the asa before it goes to the checkpoint firewall

I have routing between the checkpoint and asa dmz's

I can ping from corporate network to the server on checkpoint dmz

but i cant ping from the dmz on the cisco asa to the checkpoint dmz

i have routing in place and also allowed all services and all interfaces for now on my ACL

any ideas.

I think the issue is on the cisco asa dmz

thanks

Kevin

[Julio Carvajal · Accepted solution]

Hello Kevin,

I would say corporate security level interface is higher than the DMZ one, so you will need to add an ACL to permit the traffic

Do the following

packet-tracer input dmz icmp x.x.x.x ( DMZ_ASA_HOST ) 8 0 Y.Y.Y.Y ( Corporate SERVER ON checkpoint)

Post the results and pleasee remember to rate all of the helpful posts

[ohareka70]

You are correct on this.  The ACL i had was applied to the wrong interface and hence the traffic was going no where.  The ACL on one firewall (Checkpoint) was ok but not on the Cisco ASA. Thats it sorted now though and i can ping the servers from both locations.

thanks

Kevin