Restrict Ping to FTD Management Interface

mumbles202 · ‎08-22-2022

Is there a way to restrict ICMP for the management interface of an FTD? I see how to restrict ICMP to the data-plane interfaces of the FTD and also how to restrict ssh access to the management interface of the FTD, but didn't see how to restrict ICMP to a subset of hosts that need to monitor the device. Is that possible?

Mark Elsen · ‎08-23-2022

- FYI : https://community.cisco.com/t5/network-security/block-icmp-to-ftd-device-interface-ip-in-fdm/m-p/4152415#M1073966

M.

-- ' Listen to the wind, it talks
Listen to the silence, it speaks
Listen to your heart, it knows
Ganado Mucho (1809 to 1893 ) Navajo Indian

mumbles202 · ‎08-23-2022

Thanks for the link. So that works for disabling pings to the outside interface of the FTD. I'm referring to the MGMT interface which doesn't sit behind the FTD inside interface. I see you can modify the ssh access-list that is applied to the MGMT interface but haven't found a way to restrict ICMP to that interface.