Fortigate wan ip address is open for ping

We have 2 Fortigate 200F firewalls in HA.

The WAN interface is responding to ping from any ip address.

We want to be able to ping this ip from certain locations only so we added these ip addresses to trusted hosts section under administrators. 

When I run the following debug I can see the traffic coming in but there is no access rule specified.

local ip replaced with: 2.2.2.2
fortigate wan ip replaced with: 3.3.3.3

diagnose debug enable
diagnose debug flow filter addr 2.2.2.2
diagnose debug flow show function-name enable
diagnose debug flow trace start 100

id=20085 trace_id=246 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 2.2.2.2:1->3.3.3.3:2048) tun_id=0.0.0.0 from port1. type=8, code=0, id=1, seq=35."
id=20085 trace_id=246 func=init_ip_session_common line=6050 msg="allocate a new session-0275cc51, tun_id=0.0.0.0"
id=20085 trace_id=246 func=vf_ip_route_input_common line=2605 msg="find a route: flag=80000000 gw-3.3.3.3 via root"
id=20085 trace_id=247 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 3.3.3.3:1->2.2.2.2:0) tun_id=0.0.0.0 from local. type=0, code=0, id=1, seq=35."
id=20085 trace_id=247 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, reply direction"
id=20085 trace_id=248 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 2.2.2.2:1->3.3.3.3:2048) tun_id=0.0.0.0 from port1. type=8, code=0, id=1, seq=36."
id=20085 trace_id=248 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, original direction"
id=20085 trace_id=249 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 3.3.3.3:1->2.2.2.2:0) tun_id=0.0.0.0 from local. type=0, code=0, id=1, seq=36."
id=20085 trace_id=249 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, reply direction"
id=20085 trace_id=250 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 2.2.2.2:1->3.3.3.3:2048) tun_id=0.0.0.0 from port1. type=8, code=0, id=1, seq=37."
id=20085 trace_id=250 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, original direction"
id=20085 trace_id=251 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 3.3.3.3:1->2.2.2.2:0) tun_id=0.0.0.0 from local. type=0, code=0, id=1, seq=37."
id=20085 trace_id=251 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, reply direction"
id=20085 trace_id=252 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 2.2.2.2:1->3.3.3.3:2048) tun_id=0.0.0.0 from port1. type=8, code=0, id=1, seq=38."
id=20085 trace_id=252 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, original direction"
id=20085 trace_id=253 func=print_pkt_detail line=5871 msg="vd-root:0 received a packet(proto=1, 3.3.3.3:1->2.2.2.2:0) tun_id=0.0.0.0 from local. type=0, code=0, id=1, seq=38."
id=20085 trace_id=253 func=resolve_ip_tuple_fast line=5957 msg="Find an existing session, id-0275cc51, reply direction"