By default the ASA does permit ICMP replies TO any ASA interface, but does not permit ICMP THROUGH the ASA. In other words you need to specifically configure the ASA…