Hello Jess,
Well, We usually enable Signature ID 2000 Sub-ID 0
Which is set for ICMP, so you can send ICMP across the IPS and then correlate if the configured action was triggered,
Regards,
Remember to rate all of the helpful posts.
For this community that's as important as a thanks.
Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC