Solved: Possible to limit ICMP's on outside of ASA?

whiteford · ‎02-25-2008

Hi, is it possible to limit/drop the amount of ICMP's on the outside interface of an ASA? If I keep a constant ping on our Outside IP (via our guest network) it does drop the ICMP.

abinjola · ‎02-25-2008

you don't have the command "icmp deny any outside"..put this command and then give a try

View solution in original post

abinjola · ‎02-25-2008

I think we've already answered this

icmp deny any outside

whiteford · ‎02-25-2008

I've added that but I can still ping it.

abinjola · ‎02-25-2008

which interface are you trying to ping ?

what is the output of sh run icmp ?

whiteford · ‎02-25-2008

It's the Outside interface, I ping it from our guest ADSL line.

sh run icmp

icmp unreachable rate-limit 1 burst-size 1

abinjola · ‎02-25-2008

you don't have the command "icmp deny any outside"..put this command and then give a try

whiteford · ‎02-26-2008

Thanks that worked, is it normal to have this in place?