I have an Interface (IF1) with security Level 0.

This one connects to a Firwall where the network is located and the gateway to this is On this network is a Server with IP I can ping from the Server the interface on the ASA.

Ping - works.

But from another interface (IF2) on the asa (VLAN 168) Security Level 100. Their is no response when I try to ping the Server

Is their a route needed ?

The other firewall also provides a webseite to login to VPN. is the IP.

Will the route

route IF2

work ?

the server is able to reach this website. I want the hosts on IF1 also to be able to reach it.

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.
    – Ron Maupin
    Dec 25, 2018 at 9:13

1 Answer 1


You probably don’t have a route back. The gateway at doesn’t know how to get back to your internal ( network.

You need a route on that device.

If you can’t modify that device, consider using NAT to hide your internal addresses.

  • if you assumed, i currently have no access .. I have done NAT, and now I'm able to open the site. The website is an WebPortal of an VPN. Could it be possible, that the login isn't working because of the route back? Aug 7, 2018 at 5:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.