 ext vip address showing for internal pings
I cannot ping/traceroute to any internal host from my FW. A tcpdump on the fw internal interface displays the ext vip talking to the host, not the internal interface. If I unload the policy ping does work. There is only one NAT rule that says internal network going anywhere translate to hide behind the ext vip. All traffic out to the internet is fine. I cannot push policy to my enforcements points anymore.
Not sure how to solve this. Any and all suggestions would be appreciated.
t -
Using IPSO 4.1 NGX R60 HFA3 |