Ping outside interface from inside

[bbilut]

Can somebody explain how I would be able to ping the IP address on an untrusted interface from inside (trusted). I setup a interface management profile on the interface and I can ping the outside interface IP address from the public internet, but not from inside. I don't see any drops, and creating a policy has not seemed to help either.

I'm trying to do to troubleshoot something and not intended for long term usage.

Thanks!

[jvalentine · Accepted solution]

Is there a security policy that allows pinging between the zones associated with those two interfaces?

While pinging, try running "show counter global filter delta yes".  This should show you other reasons for packet drops (outside of policy).  

Are you using NAT?  Does your NAT policy translate the internal addresses to the external interface address?  (The one you're trying to ping?)  That may be the cause of the problem.  You could create a "no-nat" rule that bypasses NAT when the source is internal and the destination is the outside interface IP address.  Make sure this new policy is above your other NAT policy for outbound access.