This provides a configuration example for an access rule to allow devices on the DMZ to send ping requests and receive ping responses from devices on the LAN. By default your appliance does not allow traffic initiated from the DMZ to reach the LAN.
To configure an access rule that allows ping between DMZ and LAN
Place one of your interfaces into the DMZ zone.
Navigate to POLICY | Rules and Policies > Access Rules.
Click +Add to launch the Adding Rule dialog.
Select the Action to Allow.
From the Source Port/Services drop-down menu, select Ping.
From the Source Address drop-down menu, select DMZ Subnets.
From the Destination Address drop-down menu, select LAN Subnets.