Allow pings on Wan1 from Address Group?

[billp]

I' m running 5.0.7 on a 600C. I' d like to enable Ping on the Wan1 interface, but only want to make it accessible for a limited number of outside addresses. Any idea if this is possible? I tried this policy, but it did not work (Monitor1 contains all my allowed addresses).

 config firewall interface-policy
     edit 1
         set interface " wan1" 
         set srcaddr " Monitor1" 
         set dstaddr " all" 
         set service " PING" 
     next
 end
 

Thanks.

[CHR57]

Picking up an old thread.

Want only the DNS provider (ping source IP known) to be able to ping WAN interfaces of our 2 ISP. This for DNS failover.

Can this be done from GUI?

Should I disable ping on wan if under administrative access and then make a policy for that?