Do anyone can help me?
We have to send pings from our servers to external world and to perform it I configure on CSS a clause in inside VLAN to permit any icmp traffic. I also configure a clause to permit traffic from inside to outside on destination port 7 for the tcp protocol.
Moreover I configured on these clauses the sourcegroup to perform natting.
I receive echo after send a traceroute to VIP address configured but I didn't receive anything when I send a traceroute to the CSS default gateway (FW). I see only the default IP address of servers (internal CSS IP address) on the output.
This is correct if the destination is unreachable or did I forget anything on CSS?