Im just wondering why i cant ping the dmz asa interface from a host on the "inside" LAN - my PC
The asa is in a 2 x failover. I can ping the failover dmz and outside interface IP's of the current "secondary" ASA from my PC - only not the primary dmz + outside interfaces on the primary asa?
at the moment I have allow all access list outbound - so its not ACL. I am pinging from a higher security interface "inside" to a lower security DMZ interface. - I tried a packet trace from asdm - and it failed on route. dont quite get this as the DMz interface is direct attached interface + subnet. I suspect im just misunderstanding something basic about asa - Id like to know what please anyone ? :)