asa5520

kmcilvaine · ‎07-23-2007

I want to be able to ping to the internet or do a tracert. I also don't want to be seen on the outside interface.

how do I do this?

zulqurnain · ‎07-24-2007

hi

Try this out

access-list out_in permit icmp any any echo-reply

access-list out_in permit icmp any any source-quench

access-list out_in permit icmp any any unreachable

access-list out_in permit icmp any any time-exceeded

or

policy-map global_policy

class inspection_default

inspect icmp

HTH, please rate it