How can one disable PING (not ICMP) in a Fortigate?

[jefazo92]

Hi, is the above possible to do globally for all interfaces instead of having to go to each interface one by one to disable PING? 

[salemneaz]

Hi,

You can try local in policy, but it is easier to turn them off from the interface.

Example Configuration Given Below:

-------------------------------------------------------------------

Use the following command to close all ICMP ports on the WAN1 interface. The following example blocks traffic that matches the ALL_ICMP firewall service.

config firewall local-in-policy

edit 1

set intf wan1

set srcaddr all

set dstaddr all

set action deny

set service ALL_ICMP

set schedule always

end

Article Reference:

-----------------------------------------

https://docs.fortinet.com/document/fortigate/6.4.0/hardening-your-fortigate/833110/use-local-in-poli...