Currently I cannot ping the public IP address of any Branch Offices. I can ping the private IP and when the tunnel is down I CAN ping the public IP address. Currently ourOpenview station is monitoring the Public IP so these sites always appear as down even when they are not. The interface filter is set to permit all or on some sites permit ping. What do I need to do to allow ICMP to this interface? Can we restrict what networks can ICMP to this interface?