Enable Outbound ICMP on Cisco ASA 9.9


I set up a Cisco ASAv  5525 and placed a Windows VM behind it. I created the NAT (PAT) policy and default route. The Cisco ASA could ping external IP addresses (eg However, the VM behind that could not ping any external IP addresses despite being able to ping the Cisco ASA.


Windows VM:

Cisco ASA:



On the Cisco ASA use the following command

fixup protocol icmp