topic Re: Want to block ICMP request for externel IP's. in Hyperscale Firewall (Maestro)

Want to block ICMP request for externel IP's.

maxtaan — Sun, 17 Sep 2023 05:57:49 GMT

We are observing PING is reachable to all external IPs that is being destination NATed even though ping is not allowed in their respective policy.The IP's which we add in ARP from webui. Externel user able to ping those IP's. We want to block the icmp request for specifcally those IP's.

Re: Want to block ICMP request for externel IP's.

Chris_Atkinson — Sun, 17 Sep 2023 09:44:00 GMT

How are the corresponding ICMP options in Global properties currently configured?

Re: Want to block ICMP request for externel IP's.

the_rock — Sun, 17 Sep 2023 22:09:16 GMT

I was thinking a rule along the lines something like below:

src -> internal networks (NEGATE), so its everything EXCEPT internal nets

dst -> firewall(s)

service -> whatever needed

action -> block

Andy

Re: Want to block ICMP request for externel IP's.

maxtaan — Mon, 18 Sep 2023 09:21:27 GMT

Currently, it's unchecked for another reason. Is it connected to this issue?

Re: Want to block ICMP request for externel IP's.

maxtaan — Mon, 18 Sep 2023 09:22:17 GMT

Thanks for your response, sir. We have already done it to ignore the problem.

Re: Want to block ICMP request for externel IP's.

the_rock — Mon, 18 Sep 2023 11:48:49 GMT

Good job!