Symptom

ICMP traffic is droped for the reason: ICMP Inspect seq num not matched Actual host ip is dynamic natted when it goes out. Our main concern is ping going via OUTSIDE_test interface . nat (INSIDE,OUTSIDE_test) source dynamic any interface PBR applied on inside interface to route the traffic to OUTSIDE interface. access-lists applied on inside and OUTSIDE_test interfaces and icmp traffic is allowed in it in both directions.

Conditions

Workaround

disable icmp inspection and create access list for both direction

Further Problem Description