Enabling ping (ICMP) on Windows Server

  • 12 September 2022
  • 6 comments
  • 375 views

Userlevel 7
Badge +11

Frequently we need troubleshoot Veeam Backup Server through the network.

However, if Windows Firewall is enabled on SO it doesn’t reply ping and echo requests.

 

At this moment so many people act disabling Windows Firewall and mostly times don’t remember to enable it again.

So, if you want to allow ping without disabling Windows Firewall you can just run this simple command on cmd:

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow

 


6 comments

Userlevel 7
Badge +20

Thanks for this Mateus as having this with FW still on is a good thing.  Another tip to add to my list. 😎

Userlevel 7
Badge +6

Thanks...way easier than mucking around in the GUI!

Userlevel 7
Badge +13

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.

Userlevel 7
Badge +11

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.

Very Nice Marco!

Userlevel 7
Badge +20

@wolff.mateus just to add some info, with PSping you can use TCP instead ICMP, but oc, it’s blocked by default too.

https://docs.microsoft.com/en-us/sysinternals/downloads/psping

An alternative way to check if a ip is online without disabling firewall could done by using nmap (super nice, I’ll do a topic about you wanna) or, more easy, using Advanced IP Scanner and set scan to that IP.

That is extremely useful and advanced IP scanner I use all the time for things especially in my lab for checking free IPs. 😜

Userlevel 7
Badge +8

 

For me, it’s when I bring up VM’s in the lab / SureBackup.  I bring up my domain controllers first, but because I am moving to an isolated network with a different subnet windows is unhappy and uses different firewall rules.

 

I usually disable the ping test, log into the machine, accept the changes and my lab is fine.  It seems the only way I can bring the lab up so people can RDP in and test the VM’s.

 

For me its the issue of the subnet changing and masquerade as I allow ICMP in.

 

I’m going to think if I can find a way to script this into my lab as this has been annoying me for some time.

 

Thanks

 

 

 

 

Comment