ASA 5515X problem icmp
asenborisov
Registered Users Posts: 1 ■□□□□□□□□□
in Off-Topic
[h=3]I have a problem with my ASA5515X. When a enter "permit ip any any" on "outside" interface , my internal users began to lose "icmp" packets to outside. When i remove "permit ip any any" to "outside" i don't have any lose icmp packets. When is the problem ????[/h]
Comments
-
EricsLearning
Member Posts: 15 ■□□□□□□□□□
First I don't think I'd ever do a permit IP any any on the outside interface. More to the point of your question though what do your NATs and inspect policies look like? Either of those can cause issues with echo reply's being allowed back in.
-
Kreken
Member Posts: 284
I think you need to provide logs. What you are describing should not be happening for multiple reasons.