topic Re: ICMP Source-Quench? in General Topics https://live.paloaltonetworks.com/t5/general-topics/icmp-source-quench/m-p/37758#M27672 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Currently we only have applications ICMP and PING applications.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">You can create a custom applications based on ICMP type 4.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Objects &gt; Applications</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Add a New app</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Navigate to Advanced Tab&nbsp; and choose ICMP type radio button.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;"><BR /></SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">-Ameya<BR /></SPAN></P></BODY></HTML> Tue, 05 Mar 2013 23:01:27 GMT UhMayYeah 2013-03-05T23:01:27Z ICMP Source-Quench? https://live.paloaltonetworks.com/t5/general-topics/icmp-source-quench/m-p/37757#M27671 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>In Cisco ACLs, they have the option of adding rules like "access-list OUTSIDE extended permit icmp any any source-quench". Does Palo Alto have a way of distinquishing ICMP message types? I've tried looking in the application library, and ICMP shows up as an App (just like ping does) not nothing about Source-Quench, Time-Exceeded, Unreachable, etc...</P><P></P><P>Any thoughts on how to best duplicate this?</P></BODY></HTML> Tue, 05 Mar 2013 15:21:13 GMT https://live.paloaltonetworks.com/t5/general-topics/icmp-source-quench/m-p/37757#M27671 Abs 2013-03-05T15:21:13Z Re: ICMP Source-Quench? https://live.paloaltonetworks.com/t5/general-topics/icmp-source-quench/m-p/37758#M27672 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Currently we only have applications ICMP and PING applications.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">You can create a custom applications based on ICMP type 4.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Objects &gt; Applications</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Add a New app</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">Navigate to Advanced Tab&nbsp; and choose ICMP type radio button.</SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;"><BR /></SPAN></P><P><SPAN style="color: #000000; font-family: Arial, Helvetica, sans-serif; font-size: 12px; background-color: #ffffff;">-Ameya<BR /></SPAN></P></BODY></HTML> Tue, 05 Mar 2013 23:01:27 GMT https://live.paloaltonetworks.com/t5/general-topics/icmp-source-quench/m-p/37758#M27672 UhMayYeah 2013-03-05T23:01:27Z