Question : can't ping dmz zone ip through checkpoint firewall

we have a  checkpoint firewall 4.0 running in nt 4.0 ,

and we divid three zone in firewall so dmz , internal ,

and internet external zone . From internet , people can

ping the real ip and access the web server which in dmz ,

but in internal zone , we can't . we have check our

internal zone 's ip have all permission to access anywhere

through the firewall .HOw can we ping and access the real

ip which is in dmz zone .

Answer : can't ping dmz zone ip through checkpoint firewall

You should have a rule on your filewall with the source being your network and the destination being either the box in the DMZ that your trying to reach or that whole address range of whatever is in the DMZ. Review your rules carefully and make sure your cleanup rule is not dropping everything.