Hey Karsten,

Thank you for the information.

By chance is there any way/tweak which can make this possible i.e. which can make ping inside interface IP from subnet's which are behind other interface.

Thanks- Jadesh

> By chance is there any way/tweak which can make this possible i.e. which can make ping inside interface IP from subnet's which are behind other interface.

For sure! You could build a VPN-tunnel from your client-location to a VPN-gateway located on the inside of your network. Now you ping through this tunnel and it will work!

Well, obviously not what you are looking for ... What about rethinking about your requirement? Why do you have to ping the inside interface?

Well, I would have to rethink about my requirement now I guess.

But for the VPN-tunnel solution, do I have to create VPN-tunnel from inside interface ip itself or any other ip which is behind the inside interface ?

Thanks- Jadesh

> But for the VPN-tunnel solution, do I have to create VPN-tunnel from inside interface ip itself or any other ip which is behind the inside interface ?

Well, that suggestion (with an extra VPN-gateway in the internal network) was more to show that it's not worth to try to trick the ASA. Eventually the ASA will win!

But: Yes, if you build a VPN to the ASA, You can access the inside interface through the tunnel directly. That works with the help of the "management-access" function. 

> Well, I would have to rethink about my requirement now I guess.

Should be the better way to address this problem.

Thank you so much Karsten for all your replies. It has helped me a lot. I'll let you know about the conclusion on this requirement.

Thanks again... :) cheers