Receive ping count 0

[CHKlomp]

I've allowed ping traffic from an external source to the outside interface IP.

When they try to ping the firewall, I see allow traffic on the correct rule, but it only shows a send count >0 and the receive count remains 0. Also they report they do not receive the responses.

How is this explained?

I would expect to see a receive count to be at least equal or greater than the send count...

Thank you.

[OtakarKlier · Accepted solution]

Hello,

Not only do you need to have policies allowing the ping , however you also need to set an interface profile to allow it.

Hope that helps.

[reaper]

you need to create and attach an interface management profile that allows ping as the dataplane interfaces are 'dark' by default

[CHKlomp]

Thanks for the tip. We had a profile setup, but this source address was not on the allowed list.

It's curious why it would count send packets though.?!

Lesson learned!

[reaper]

In the traffic log, the send count is what the client sends out, receive is what the server returns
For sessions to the firewall this can look confusing

[CHKlomp]

Thanks for the clarification.

I've always thought it was from the f/w's perspective.

If it's from the Client's perspective, then it makes sense.