Is there way that application-override for icmp??

[KiCheon.Lee]

Hello

Is there way that application-override for icmp base application as ping , traceroute ??

I would like to bypass from L7-Engine.

Thanks

[ymiyashita · Accepted solution]

Though I think ICMP doesn't go up to L7-Engine anyway, if you want to control ICMP traffic based on the ICMP packet types, you can create custom apps.

DOC-4779 - Security Policy to Allow/Deny a Certain ICMP Type

https://live.paloaltonetworks.com/docs/DOC-4779

I hope it helps.

- Yasu