We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now


PIX internal to external icmp

Medium Priority
Last Modified: 2013-11-29
Hi experts,

An easy one here:

I get no respose from my PIX's external interface when I ping it from the internal network - I can however ping the internet from the internal network . Is this normal behaviour of PIX - is it a limitation of NAT or is something up with my PIX?

Watch Question

It's probably blocking the ICMP protocol used by PING and TRACERT. If you enable that in the PIX, you should be able to ping it.

D'OH! I just noticed you said you can ping the internet... :)

I checked and it looks like it's a limitation of NAT - the external interface can't respond to a request from it's own internal interface.


Thanks uter,

Yes, I do have ICMP rules. I just want to be sure that it's normal and not something in the way I've configured PIX. Where did you get the info from?

I can ping both interfaces from the PIX (ie - in a telnet session.)


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.