There are actually two protections that can limit the size of pings:
- Core Activation: Large Ping Size (default limit 2500 bytes)
- ThreatCloud Protection: Max Ping Echo Reply Size (default limit 512 bytes)
To make things even more confusing the first is one of the fixed 39 Core Activations, while the other one is part of the much more numerous (and always growing) ThreatCloud Protections. The main thing to watch out for is they are controlled by their own profiles and exceptions, so adding a standard Threat Prevention exception will only apply to the second protection and not the first. Core Activations have their own separate set of exceptions (and better yet so do the 146 Inspection Settings).
The differences between working with Core Activations vs. IPS ThreatCloud protections is a major source of confusion, and nicely covered by the Check Point Threat Prevention Specialist (CTPS) course available from ATCs worldwide.
Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course