Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
990
Views
0
Helpful
2
Replies

Cisco FMC ICMP Block Not working

Garry Cooper
Level 1
Level 1

‎09-10-2021 07:47 AM - edited ‎09-10-2021 07:48 AM

Setup FMC to block icmp on all my WAN interfaces.

Some IP's are blocked and dont reply but some interfaces do.

I followed this guide https://www.lammle.com/post/new-ftd-device-not-like-new-asa

 

Any ideas as I need all interfaces blocked from icmp

I have 4 interfaces within my WAN zone.

 

Config attached.

icmp.JPG

 

icmp2.JPG

 

 

 

 

0 Helpful
2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

‎09-10-2021 10:12 AM

Can you share the definition you created for the ICMP-Deny object?

It should be denying ICMP type 8 packets (echo requests).

0 Helpful

Garry Cooper
Level 1
Level 1
In response to Marvin Rhoads

‎09-13-2021 12:44 AM - edited ‎09-13-2021 12:45 AM

This is the port setup

 

 

Preview file
25 KB
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card