You should extend your outbound ACL on a perimeter router:
ip access-list extended XXXX
..bla bla .and....
deny ICMP any any TIME-EXCEEDED
permit ip any any
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: