topic Re: I'm not able to ping client PC in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169224#M30634 <P>How are your global properties configured?</P> <P>E.g. "Accept icmp requests" before last / first&nbsp;</P> <P>Also your "connection persistence" settings - rematch / keep?</P> <P>&nbsp;</P> Thu, 26 Jan 2023 06:10:05 GMT Chris_Atkinson 2023-01-26T06:10:05Z I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169061#M30580 <P>I'm using vmware workstation, created management server and Security Gateway and SIC also patched,</P><P>Policy changed to ACCEPT in Management server and pinging different network properly.</P><P>Again policy changed from ACCEPT to DROP but it's pinging, it has to drop the packets but it's pinging.&nbsp;</P> Wed, 25 Jan 2023 09:27:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169061#M30580 Siddu 2023-01-25T09:27:04Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169086#M30588 <P>Any network diagram? Also, are you trying to allow or drop ICMP?</P> Wed, 25 Jan 2023 11:36:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169086#M30588 _Val_ 2023-01-25T11:36:11Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169092#M30589 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Topology in VMWare" style="width: 706px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/19293iCEF4CD256311773D/image-size/large?v=v2&amp;px=999" role="button" title="Topology.jpg" alt="Topology in VMWare" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Topology in VMWare</span></span></P> Wed, 25 Jan 2023 11:59:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169092#M30589 Siddu 2023-01-25T11:59:17Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169093#M30590 <P>I have set a topology as given above diagram, I have configured Managment server and Security gateway also SIC Trust Patched, In management console policy have been changed to ACCEPT and it's pinging properly, again i have changed policy From ACCEPT to DROP while ping to other PC it has been pinging, it has to be drop the packets.</P> Wed, 25 Jan 2023 12:07:26 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169093#M30590 Siddu 2023-01-25T12:07:26Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169094#M30591 <P>Did you install the policy or only publish it?</P> <P>What is the source &amp; destination of the ping test?</P> Wed, 25 Jan 2023 12:16:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169094#M30591 Chris_Atkinson 2023-01-25T12:16:53Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169095#M30592 <P>Who is pinging whom?</P> <P>You do not make it easy to understand.</P> Wed, 25 Jan 2023 12:17:50 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169095#M30592 _Val_ 2023-01-25T12:17:50Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169097#M30593 <P>Publish</P><P>and Ping is from Managment Server (192.168.8.10) to other network (192.168.2.10)</P> Wed, 25 Jan 2023 12:22:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169097#M30593 Siddu 2023-01-25T12:22:02Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169098#M30594 <P>Pinging from 192.168.8.X network to 192.168.3.X network</P> Wed, 25 Jan 2023 12:24:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169098#M30594 Siddu 2023-01-25T12:24:00Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169099#M30595 <P>Installed policy and published both done.</P> Wed, 25 Jan 2023 12:24:57 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169099#M30595 Siddu 2023-01-25T12:24:57Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169101#M30596 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot (8).png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/19294iE4CE992F906BD18D/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot (8).png" alt="Screenshot (8).png" /></span></P> Wed, 25 Jan 2023 12:29:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169101#M30596 Siddu 2023-01-25T12:29:27Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169103#M30597 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot (8).png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/19295i5A64F133AC890B1D/image-size/large?v=v2&amp;px=999" role="button" title="Screenshot (8).png" alt="Screenshot (8).png" /></span></P> Wed, 25 Jan 2023 12:30:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169103#M30597 Siddu 2023-01-25T12:30:36Z Re: I'm not able to ping client PC https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169224#M30634 <P>How are your global properties configured?</P> <P>E.g. "Accept icmp requests" before last / first&nbsp;</P> <P>Also your "connection persistence" settings - rematch / keep?</P> <P>&nbsp;</P> Thu, 26 Jan 2023 06:10:05 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/I-m-not-able-to-ping-client-PC/m-p/169224#M30634 Chris_Atkinson 2023-01-26T06:10:05Z