Disabling ICMP Timestamp Replies from FortiAP on LAN

Forum|Forum|1 year ago
April 8, 2025
2 replies
1389 views

Does anyone know how to disable ICMP timestamp replies from FortiAPs? My FortiAPs are connected to my LAN, and I have Fortiswitches. Polices do not seem to work - my guess is because the traffic is being routed by the switches and not going through the firewall?

FortiAP

AEK

SuperUser

If I'm not wrong the an ICMP timestamp reply is a response to an ICMP timestamp request, right?

In that case then you just need to add a firewall rule to deny ICMP requests from the desired source to the FortiAPs.

This is because I don't know a way to allow ICMP requests and in the same time to deny ICMP replies. As far as I know this is how stateful firewalls are designed.

AEK

fionaCAuthor

Explorer

For some reason, that does not work. I am wondering if it is because the APs and the host are on the same LAN, and therefore the traffic is not routed through the Fortigate.