The PC can ping the firewall, but the firewall cannot ping the PC.

Popeye_Wang · Created Aug 16, 2019 09:54:28

Hi @Sprout!

I think I know what the problem is.

The priority of the service-manage function is higher than that of the security policy. Only when the service-manage function is enabled on the inbound interface can the device be accessed via the corresponding interface.

However, firewall V1 and V5 have different mechanisms in different versions. In V1, only the service-manage ping enable command needs to be enabled on the interface to implement the ping function between the device and the peer end. The interzone policy between the local and trust zone doesn’t need to be set to permit.

But for V5R1 firewalls, the service-manage command can only allow packets to enter the device so that the device can be pinged. The packets initiated by the device are controlled by the interzone policy, so only after the interzone policy has been set to permit can the device ping other devices.

The firewall image in the newest eNSP is the V5 version. So you also need to configure the security policies.

Popeye_Wang · Created Aug 16, 2019 09:54:28

Hi @Sprout!

I think I know what the problem is.

The priority of the service-manage function is higher than that of the security policy. Only when the service-manage function is enabled on the inbound interface can the device be accessed via the corresponding interface.

However, firewall V1 and V5 have different mechanisms in different versions. In V1, only the service-manage ping enable command needs to be enabled on the interface to implement the ping function between the device and the peer end. The interzone policy between the local and trust zone doesn’t need to be set to permit.

But for V5R1 firewalls, the service-manage command can only allow packets to enter the device so that the device can be pinged. The packets initiated by the device are controlled by the interzone policy, so only after the interzone policy has been set to permit can the device ping other devices.

The firewall image in the newest eNSP is the V5 version. So you also need to configure the security policies.

Vadim_K · Created May 29, 2020 20:20:55

Could anybody explain how to PERMIT ping packets from USG to directly connected device, in situation when port already in TRUST zone?
Issue is PC can ping firewall, but firewall cant ping PC,
and only one solution is set default action of security-policy to PERMIT ...
Do anyone have better solution how to let firewall ping PC without permitting everything?

scarletT · Created Jun 14, 2020 12:37:39

Thank you! The PC can ping the firewall, but the firewall cannot ping the PC.-3339447-1

scarletT · Created Jun 14, 2020 12:37:44

Great idea

Giandiego · Created Jan 19, 2021 03:19:49

Nice

LilStylz237 · Created Mar 10, 2021 20:35:03

Thanks

LilStylz237 · Created Mar 10, 2021 20:35:20

For sharing

ulrichwandja · Created Mar 29, 2021 17:07:03

Nice

The PC can ping the firewall, but the firewall cannot ping the PC.

Best answer

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

The PC can ping the firewall, but the firewall cannot ping the PC.

Best answer

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers