topic Re: Receive ping count 0 in General Topics

Receive ping count 0

CHKlomp — Tue, 12 Mar 2019 16:36:00 GMT

I've allowed ping traffic from an external source to the outside interface IP.

When they try to ping the firewall, I see allow traffic on the correct rule, but it only shows a send count >0 and the receive count remains 0. Also they report they do not receive the responses.

How is this explained?

I would expect to see a receive count to be at least equal or greater than the send count...

Thank you.

Re: Receive ping count 0

OtakarKlier — Tue, 12 Mar 2019 17:08:04 GMT

Hello,

Not only do you need to have policies allowing the ping , however you also need to set an interface profile to allow it.

Hope that helps.

Re: Receive ping count 0

reaper — Wed, 13 Mar 2019 12:38:07 GMT

you need to create and attach an interface management profile that allows ping as the dataplane interfaces are 'dark' by default

Re: Receive ping count 0

CHKlomp — Wed, 13 Mar 2019 15:56:19 GMT

Thanks for the tip. We had a profile setup, but this source address was not on the allowed list.

It's curious why it would count send packets though.?!

Lesson learned!

Re: Receive ping count 0

reaper — Wed, 13 Mar 2019 20:31:09 GMT

In the traffic log, the send count is what the client sends out, receive is what the server returns
For sessions to the firewall this can look confusing

Re: Receive ping count 0

CHKlomp — Wed, 13 Mar 2019 23:24:18 GMT

Thanks for the clarification.

I've always thought it was from the f/w's perspective.

If it's from the Client's perspective, then it makes sense.