primozl wrote: Hi all, I have a classic setup... mgmt port, one outside, one DMZ and one inside L3 ports, NAT policy defined and a bunch of security rules. Outside, Inside and DMZ ports all have their IP addresses defined, but I cannot ping them. Not even inside port from inside network. Any ideas? Do you have an interface management profile defined? Under the "network' tab in your management console, you should see "Interface Mgmt" under the 'Network Profiles" section. Create a new one with the protocol(s) you wish to allow (ping, snmp etc), optionally add the permitted IP addresses for the requests to come from, save this, then edit the interface concerned and under the "Interface Management" drop down, apply the profile you just creatwed. Commit this and you should be able to use the protocols you defined in the first step. HTH
... View more