Skip to main content

Enabling ping (ICMP) on Windows Server

  • September 12, 2022
  • 6 comments
  • 597 views

wolff.mateus
Forum|alt.badge.img+11

Frequently we need troubleshoot Veeam Backup Server through the network.

However, if Windows Firewall is enabled on SO it doesn’t reply ping and echo requests.

 

At this moment so many people act disabling Windows Firewall and mostly times don’t remember to enable it again.

So, if you want to allow ping without disabling Windows Firewall you can just run this simple command on cmd:

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow

 

6 comments

Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • September 12, 2022

Thanks for this Mateus as having this with FW still on is a good thing.  Another tip to add to my list. 😎


dloseke
Forum|alt.badge.img+8
  • Veeam Vanguard
  • September 12, 2022

Thanks...way easier than mucking around in the GUI!


marcofabbri
Forum|alt.badge.img+12
  • On the path to Greatness
  • September 13, 2022

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.


wolff.mateus
Forum|alt.badge.img+11
  • Author
  • Veeam Vanguard
  • September 13, 2022

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.

Very Nice Marco!


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • September 13, 2022

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.

That is extremely useful and advanced IP scanner I use all the time for things especially in my lab for checking free IPs. 😜


Scott
Forum|alt.badge.img+9
  • Veeam Legend
  • September 13, 2022

 

For me, it’s when I bring up VM’s in the lab / SureBackup.  I bring up my domain controllers first, but because I am moving to an isolated network with a different subnet windows is unhappy and uses different firewall rules.

 

I usually disable the ping test, log into the machine, accept the changes and my lab is fine.  It seems the only way I can bring the lab up so people can RDP in and test the VM’s.

 

For me its the issue of the subnet changing and masquerade as I allow ICMP in.

 

I’m going to think if I can find a way to script this into my lab as this has been annoying me for some time.

 

Thanks