ASA SFR ICMP Signature for large Packet

[QUARK TARO]

I have to demonstrate  IPS signature with drop action in ASA AFR.

Can anyone tell me the signature for large icmp packet size? Is it enabled by default?

[Dennis Perto]

I guess that you can use this deleted rule to make a new one, that fits your needs. :)

Remember to enable the rule in your Intrusion policy, and assign it to a Access Control rule.