# ASA ICMP from Outside to Inside| Help! **URL:** \ **Category:** ASA\ **Created:** [July 14, 2021, 3:29pm UTC](https://forum.networklessons.com/t/asa-icmp-from-outside-to-inside-help/14905 "2021-07-14T15:29:02Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)\ **Post date:** [July 16, 2021, 5:52am UTC](https://forum.networklessons.com/t/asa-icmp-from-outside-to-inside-help/14905/2 "2021-07-16T05:52:32Z")
Hello Lukas The behaviour that you are describing is actually done by design. When you configure a DMZ, it is designed to be able to communicate with the “internet at large”, so communication from the OUTSIDE interface towards the DMZ is allowed. Take a look at the Security Zones section of the following lesson: > **[Introduction to Firewalls](https://networklessons.com/cisco/asa-firewall/introduction-to-firewalls)** > > This lesson explains the basics of Firewalls, Security Zones, Stateful filtering, and Deep Packet Inspection. However, communication from OUTSIDE to INSIDE is not allowed. You can however make an exception to this rule by using an access list, and specifying what kind of traffic you will allow taking place in this direction. More info on how this can be done can be found here: > **[Cisco ASA Access-List](https://networklessons.com/cisco/asa-firewall/cisco-asa-access-list)** > > This lesson explains how to configure access-lists on the Cisco ASA Firewall. ACLs are used for filtering and classification. Now one thing to keep in mind is that if **the destination of your ping is the ASA interface itself** , then you will get **no response to the ping**. The ASA is designed not to respond to pings that come from a different subnet. This may be the reason that there is no reason given for the drop. Take a look and let us know… I hope this has been helpful! Laz --- _[View the full topic](https://forum.networklessons.com/t/asa-icmp-from-outside-to-inside-help/14905)._