topic Re: How to ping External Interface IP in Next-Generation Firewall Discussions

How to ping External Interface IP

B.Fisher — Fri, 06 Dec 2024 19:36:08 GMT

I am trying to setup the ability to ping an external interface's IP address. I have setup a MGMT profile that allows PING assigned to the physical interface where our public IP addresses are. I also created a security rule that allows ICMP and PING to that particular IP. The rule is setup as follows

Type: Universal

source zone: External

source address: <my home ISP IP>

Destination zone: External

Destination address: corporate ISP IP

I listed ICMP and PING under application but I also set it to any for testing and still don't see any Hit

What am I missing?

Re: How to ping External Interface IP

jpomachagua — Fri, 06 Dec 2024 21:00:38 GMT

Hello @B.Fisher

Is there a static route configured for 0.0.0.0? Additionally, you can navigate to Device>Troubleshooting and test the traffic to the specific IP address to determine which policy the traffic is being matched against.

Re: How to ping External Interface IP

Edsnow — Thu, 12 Dec 2024 07:55:09 GMT

If you are using broadband there is a possibility where your public IP might be dynamic. Please verify it is still the same IP you configured under the sec policy

Re: How to ping External Interface IP

B.Fisher — Thu, 12 Dec 2024 13:37:16 GMT

This was my fault. I had the mgmt profile on the external nic configured wrong. Once I fixed that I was able to ping