Unable to create destination NAT rule for ICMP service

[Firewall_Head]

Dear Checkmates,

I'm having problem creating DST NAT rule for an ICMP traffic, I'm forced to create a rule with services as "ANY" for this to work. 

Can someone let me know if this is a limitation and so please share the relevant document from Check Point.

Thanks in advance!

=======

WR,

FH

[Lesley]

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...

NAT (Network Address Translation) is a feature of the Firewall Software Blade

 and replaces IPv4 and IPv6 addresses to add more security. NAT protects the identity of a network and does not show internal IP addresses to the Internet.

The Security Gateway can change:

• The source IP address in a packet.

• The destination IP address in a packet.

• The TCP / UDP port in a packet. (ICMP is not TCP or UDP)