Secure Mobile Access 12.4 Administration Guide

Table of Contents

Disable or Suppress ICMP Traffic

If both network interfaces are enabled, enabling Internet Control Message Protocol (ICMP) makes it possible for someone to discover the appliance from the Internet. The most secure approach is to disable ICMP or enable ICMP only on the internal interface. If you do enable ICMP , you should suppress ICMP Echo Request traffic using a firewall or other network device.