Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
After upgrade from ASA 9.4(2)6 to 9.4(3)8 ASA5515-X the icmp/echo was denied (%ASA-4-106023) to all servers from the Internet.All our firewall-rules are based on the translated (inside) addresses.After the update I had to change all the icmp/echo rul...
Hi Aditya,
There was no 'inspect icmp' before or after the upgrade, I compared both configs with 'show run all'. By the way this is about incoming traffic (from the Internet to the DMZ).
Maybe using inspect helps but then it's strange that this wasn...
