Pix ICMP errors

Posted on 2004-11-08
Last Modified: 2012-06-27
I keep getting this error on my snmp trap
%Pix-4-400010: IDS:2000 ICMP echo reply from to on interface outside

I'm no ccna and can't seem to figure this one out, here is the access-list for the Pix

access-list 101; 5 elements
access-list 101 line 1 permit ip (hitcnt=204120)
access-list 101 line 2 permit ip (hitcnt=6)
access-list 101 line 3 permit ip host X.X.X.X host (hitcnt=16788467)
access-list 101 line 4 permit icmp (hitcnt=0)
access-list 101 line 5 permit ip host X.X.X.X (hitcnt=0)
access-list nonat; 6 elements
access-list nonat line 1 permit ip (hitcnt=449549)
access-list nonat line 2 permit ip (hitcnt=9)
access-list nonat line 3 permit ip (hitcnt=32635)
access-list nonat line 4 permit ip host X.X.X.X host (hitcnt=0)
access-list nonat line 5 permit icmp (hitcnt=0)
access-list nonat line 6 permit icmp (hitcnt=0)
access-list 102; 2 elements
access-list 102 line 1 permit ip (hitcnt=25823)
access-list 102 line 2 permit icmp (hitcnt=0)

I'll provide all the information you need, just ask  

Thanks in advance!!!
Question by:ibtaya
    LVL 2

    Author Comment

    I forgot to tell you, this error is originating from the 10.3 side and the snmp trap is on the 10.1 side.  Don't know if this is important or not?>?>?>?
    LVL 79

    Accepted Solution

    This is simply an informational message:
    >%Pix-4-400010: IDS:2000 ICMP echo reply from to on interface outside

    You can suppress this message so that it won't fill up your logs:
       no logging message 400010


    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Suggested Solutions

    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now