Hello all,

Usually, in a large environment, it's good to do the basic testing of pingpath, tracert, etc to determine if a device is responsive or not.

By default, I read that pix firewalls block all icmp packets which would hinder the above technique useless.

Does anyone know how to enable icmp packet flow on a pix firewall? It would be ideal to allow it for a specific user/i.p address or even internal machines.

If icmp is enabled on the firewall for anyone, would this cause any issues, congestion or security problems?

Thanks