what includes ip service

TECH-JEFF · ‎03-08-2016

Hi, just want to know further regarding service "ip" in Cisco ASA. I was advised from my previous thread that this includes ICMP or ping. In my access rules, I've already set all rules to be ip as the service but for some reason, our internal IP's is unable to ping our WAN IP block.

Are there any other things I need to check on?

Thanks

Jeff

Jefferson Co

Kanwaljeet Singh · ‎03-08-2016

Hi Jeff,

IP should include TCP, UDP OR ICMP in this case but not everything is allowed or will work by just allowing it in ACL. Some traffic is controlled by ASA differently. Somethings may require special handling like inspection. Do you have ICMP inspection enabled?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

TECH-JEFF · ‎03-08-2016

Thanks for the input, that is something I haven't check. Will get back to you and will try to check that now.

Thanks

Jeff

Jefferson Co

TECH-JEFF · ‎03-08-2016

I saw one inspection though, it just checks the DNS box, so I assume it just inspects DNS. But when I try to add ICMP and ticked this box, still not able to ping other IP's in our WAN.

FYI, tried pinging the ip block outside the network like 3G or via mobile, its pingable.

Thanks

Jeff

Jefferson Co