Gaia 81.10/Quantum 6200: Can I drop ICMP redirect packets without logging?

[pizzaprophet]

My firewall gets a lot of ICMP requests that are dropped (reason: ICMP redirect packets are not allowed). Is it possible to have them dropped without logging?

[PhoneBoy]

Yes you should be able to create an Access Policy rule that does this.
The Track field for this rule should contain “None.”

[pizzaprophet]

seems like this doesn't work. ICMP rediret packets are dropped (and logged) before my policies are applied?

[PhoneBoy]

What precise rule is it logging on?
If it's Rule 0, check the Implied Rules in Global Properties.

[pizzaprophet]

It's not an implied rule. See the screenshot in my first post, it says "Policy Name: Standard", and no rule number

[G_W_Albrecht]

Yes, see https://support.checkpoint.com/results/sk/sk112772 for allowing ICMP redirect packets - then an Access policy as suggested by PhoneBoy will work!