Restrict Ping to FTD Management Interface

mumbles202 · ‎08-22-2022

Is there a way to restrict ICMP for the management interface of an FTD? I see how to restrict ICMP to the data-plane interfaces of the FTD and also how to restrict ssh access to the management interface of the FTD, but didn't see how to restrict ICMP to a subset of hosts that need to monitor the device. Is that possible?

marce1000 · ‎08-23-2022

- FYI : https://community.cisco.com/t5/network-security/block-icmp-to-ftd-device-interface-ip-in-fdm/m-p/4152415#M1073966

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

mumbles202 · ‎08-23-2022

Thanks for the link. So that works for disabling pings to the outside interface of the FTD. I'm referring to the MGMT interface which doesn't sit behind the FTD inside interface. I see you can modify the ssh access-list that is applied to the MGMT interface but haven't found a way to restrict ICMP to that interface.