PIX|ASA: can an inside host ping the outside iface ?

[igorfould]

Hi,

I know how to configure a PIX/ASA in order to control hosts on various interfaces to ping these interfaces or ping hosts in other segments through the firewall.

But I would like to know whether it is possible to ping the outside interface from a host on the inside segment. Or is it impossible to achieve ?

Thanks

ixf

[unicmd · Accepted solution]

hi,

afaik it isnt possible not even if your acl's permit icmp. You can only ping the interface your connected to.

Martin

DK

[igorfould]

Hi,

I'm of the same opinion, I just wanted somebody to corroborate my vague notion of this fact ...

Thank you, Martin ...

Igor