If both network interfaces are enabled, enabling Internet Control Message Protocol (ICMP) makes it possible for someone to discover the appliance from the Internet. The most secure approach is to disable ICMP or enable ICMP only on the internal interface. If you do enable ICMP , you should suppress ICMP Echo Request traffic using a firewall or other network device.