Regular Translation Creation Failed for icmp - Millions

jameswatson33 — Tue, 20 Aug 2019 17:34:42 GMT

Good day,

I am a security analyst trying to tame the log traffic from our firewall (2 FTD 4140 + FMC). I have had a CCNA in the past but primarily worked in systems so I am familiar with networking protocols and concepts but inexperienced at troubleshooting. So I was hopeful that someone could point me in the right direction regarding something I'm seeing in our logs before I take it to our networking team.

I'm getting about 1.5M of the following messages daily

regular translation creation failed for icmp src INSIDE:10.192.0.204 dst OUTSIDE:173.194.219.94 (type 3, code 3)

They are all from different src/dst addresses and seem to correspond to otherwise normal translation during internet access. I did a bit of googling and search of this forum but did not find anything immediately helpful. The messages are not linked to any specific support issues, but I would like to eliminate/suppress them if possible in the interests of event log management.

Any suggestions? Or additional information I can provide?

Re: Regular Translation Creation Failed for icmp - Millions

#Mat — Tue, 20 Aug 2019 18:46:43 GMT

Hi jameswatson33, if this traffic is safe, try with enable icmp inspection.

From CLI do configure inspection ICMP enable

Regards.-

topic Re: Regular Translation Creation Failed for icmp - Millions in Network Security

Regular Translation Creation Failed for icmp - Millions

Re: Regular Translation Creation Failed for icmp - Millions