Why One to One Deny ICMP rule blocking all ICMP traffic for inside host ?

[Haider Malik]

Hello , I have created one to one deny rule for ICMP just for single inside host to block PING to 8.8.8.8 .

however the rule is blocking all ICMP traffic for this inside host .

I cant ping to any outside from this host 

Can you please explain what is wrong in this rule ? 

I have attached the screen shot . 

[Marvin Rhoads · Accepted solution]

Once you add an ACL to an interface, you are also adding an implicit "deny any-any".

You need to add a "permit any-any" after the first ACL entry to override that behavior.

[Haider Malik]

You are always a supper hero here :) . Resolved