- Silver, 250 points or more
VPN clients are able to ping all devices on the network BUT those located in the management subnet. My ASA has a direct connection to the management interface and therefore the subnet.
Good one too, take it off (management-only)
and if you want to access the own firewall at management ip you have to issue the global command management-access management