Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

ICMP Ping packet restrication useing SEP

Updated: 04 Jun 2010 | 5 comments
hemu's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Dear All,

How can we restric ICMP ping packets size using SEP and how can we maintain exclusion.......

Pleas help.....

Comments

Jason1222's picture
06
Nov
2009
0 Votes 0
Login to vote

You want to what?

You want to limit the size of a PING packet?  A standard packet is 32 bytes and can grow to 1500 bytes (maximum MTU).  You want to restrict the size of a packet?  I don't think that SEP would be capable of doing something like that.

You can, using the firewall, turn off ICMP traffic...  You can, from certain manged switches and or routers, restrict Multicast and or local segment broadcast... 

hemu's picture
06
Nov
2009
0 Votes 0
Login to vote

You are right i can do it

You are right i can do it from router my MTU on router is 1300 but i want to know is SEP is capable to do these........?

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

hemu's picture
06
Nov
2009
0 Votes 0
Login to vote

also is it possible to do it

also is it possible to do it with any windows hack........?to ristric client machine to ping more then 32 bytes in LAN......?

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Bijay.Swain's picture
06
Nov
2009
0 Votes 0
Login to vote

Restricting ICMP packet size

Restricting ICMP packet size can't be done through SEP. You can block the whole packate/protocol but can't specify the allowed/restricted  size.

Vikram Kumar-SAV to SEP's picture
08
Nov
2009
0 Votes 0
Login to vote

This can be done via Firewall

This can be done via Firewall .
When you create a firewall rule for Netowrk Service rule ..next..next..finish..
double click Service -ADD...select ICMP and you get all the 40 ICMP type to block or allow. 

https://www-secure.symantec.com/connect/forums/ips-signatures