ICMP Defense Policy

The defense policies for ICMP services cover block, and rate limiting.

• Block

  Discards all ICMP packets.

• Rate Limiting

  • ICMP Rate Limiting: Limits ICMP rate destined for an IP address below Threshold.

  • ICMP New Session Limiting: Limits the number of new ICMP sessions to the destination IP address per second below the specified Threshold.

  The Threshold is specified based on actual network bandwidths.