I see constant floods of  icmp denies type 11 code 0 on my outside ASA interface in the syslog.  Apr 04 2020 11:19:36 {ISP IP} {INTERNAL IP} Deny icmp src outside:{ISP IP} dst inside:{INTERNAL IP} (type 11, code 0) by access-group "Outside" [0x0, 0x0...

I just configured layer 3 switch replacing sub interfaces. It was my first time deploying a layer 3 switch. This was at one of our sites with IKEV2 STS.  I have a port that's doing the routing on the switch connected to an ASA. The ASA inside interfa...