Title: PIX and ICMP

Hi all,

I have a pix and would like to allow icmp echo request and reply to some of our servers in the dmz for a monitorig system that I have set up. The lan is private as well as the dmz and I have used NAT + GLOBAL to allow connections into the DMZ.

I notice that the PIX doesn't handle ICMP statefully .... the request goes to the server but the pix is blocking the reply ... am I missing something or do I have to write ACL's for the return packets ?

Thanks
Mark

Reply via email to