StudyToCert

All certifications / CCST Networking / Lessons

Cisco Certified Support Technician (CCST) Networking 100-150 v1.0 · Domain 5: Diagnosing problems

How firewalls can make ping or traceroute fail even when the service works

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Ping and traceroute are excellent first tests, but they rely on ICMP and, for traceroute, on routers replying with ICMP Time Exceeded messages. Firewalls, including host firewalls on computers and servers, often block some or all ICMP. When that happens, the diagnostic tool fails while the real service, such as a website on TCP 443, works perfectly. You need to recognize this so you do not chase a problem that does not exist.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CCST Networking for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CCST Networking study plan