Block ICMP Timestamp

Hi,

You can refer below article regarding ICMP Timestamp:-

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-ICMP-timestamp-on-FortiGate-interface-while/ta-p/203643

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-ICMP-timestamp-and-replies-for/ta-p/362523

Hi @sjoshi ,

But can I know if I deny ICMP Timestamp in firewall policy, will it take precedence over the interface administrative access? This is because I have a lot of interfaces configured, if I were to block ICMP Timestamp on every interfaces, it will require a lot of effort to do it. If I can just add firewall policy to block ICMP Timestamp, it will save a lot of time. Thanks

Hi @sjoshi,

If i use the method describe in the below article, will it block ICMP Timestamp reply and request on FortiGate interface even when I allow PING on interface administrative access?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-ICMP-timestamp-and-replies-for/ta-p/362523