Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How can one disable PING (not ICMP) in a Fortigate?
Hi, is the above possible to do globally for all interfaces instead of having to go to each interface one by one to disable PING?
Labels:
- Labels:
-
FortiGate
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
You can try local in policy, but it is easier to turn them off from the interface.
Example Configuration Given Below:
-------------------------------------------------------------------
Use the following command to close all ICMP ports on the WAN1 interface. The following example blocks traffic that matches the ALL_ICMP firewall service.
config firewall local-in-policy
edit 1
set intf wan1
set srcaddr all
set dstaddr all
set action deny
set service ALL_ICMP
set schedule always
end
Article Reference:
-----------------------------------------
Salem