topic Re: tcp ping from a firewall command line? in General Topics

tcp ping from a firewall command line?

JimMcGrady — Fri, 17 Dec 2021 06:58:25 GMT

From the command line of a next generation firewall i can use 'ping host blah'. Does the CLI have a command to ping a destination via TCP? Or some other tool to do the same?

Re: tcp ping from a firewall command line?

PavelK — Fri, 17 Dec 2021 07:18:47 GMT

Thank you for the post @JimMcGrady

I am not aware of any equivalent of TCP ping in PAN-OS and I do not believe such feature exists. When I have to do some basic verification of reachability from Firewall against certain TCP port, I am using SSH. For Example below sample:

When I get a response that it was closed by remote host, I know there was a response. I know it is limited and completely corresponding with your requirement, but this might be one of the workaround.

Kind Regards

Pavel

Re: tcp ping from a firewall command line?

MP18 — Sun, 19 Dec 2021 05:37:34 GMT

@JimMcGrady

You can use this command from cli. ping host 4.2.2.2. this uses mgmt interface for ping

or. ping source 1.1.1.1 host 4.2.2.2. this will use source address 1.1.1.1 to ping 4.2.2.2

Regards