JORGE RODRIGUEZ Thu, 11/15/2007 - 05:05
User Badges:
  • Green, 3000 points or more

Pankaj, I am not sure about your question but I'll give it a try, firewall blocks any inbound traffic unless you explicitly allow it through access list, so if you want to block icmp from outside to inside on a specific host look through the access list and remove the acl permiting icmp.

If you are asking that firewall outside interface to not respond to pings issue at firewall CLI "icmp deny any outside" this will stop outside interface from responding to pings, let us know if this is not what you're looking for and we'll try to help.



srue Thu, 11/15/2007 - 05:49
User Badges:
  • Blue, 1500 points or more

make sure you don't have an entry like the following:

access-list outside_acl permit icmp any any echo

filcomtech Fri, 11/16/2007 - 20:17
User Badges:

Dear Jorge,

Thanks a Lot for your fedback

let me try this i'll keep you posted for any further assistance.


This Discussion