With regards to the ICMP issue the workaround as lifted from this document.
CSCdt84906 - malformed ICMP traffic vulnerability
Only allow legitimate ICMP traffic to reach the VPN 3000 series concentrator's interface.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: