You want to block all icmp without using access-lists?
I think an intrusion prevention system is a very expensive solution for this..
technically any device that can drop traffic is a firewall. So I don't see much other option for you. You could use a linux box running ip tables to do the same thing however that is still a firewall..