Trace route not working through ASA

[whiteford]

Hi,

I have a Cisco ASA 5520 with a few VLAN's (DMZ's).

Under every Interface I have added the ICMP any any rule and tracerts work fine from the VLAN's (which are on a 3750 trunked of the ASA) to the inside interface and visa versa.

The only tracerts I can't get to work are from the outside's remote VPN access using the client VPN to inside.

I have setup remote access to the ASA and have added the ICMP any any rule on the outside interface but the traces just won't show up if I trace to a device on the inside from my XP laptop.

What do I need to do?

Thanks for you help

[eddie.mitchell]

Have you referenced the following document?

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml#asatrace