Practical DevOps Architecture

Nov 29, 2016 · Information Security

Why Traffic-Filter ACL Does Not Block Ping to 8.8.8.8 on an AR Gateway

The article explains that an AR gateway's outbound ACL 3301, which denies ICMP to 8.8.8.8, does not affect ping commands issued on the device itself because those packets bypass the forwarding plane where traffic‑filter policies are enforced.