Control ICMP Packet on PIX

[adul]

I'm permit icmp type echo to inside zone but I want permit icmp type echo only 64bytes. Can I do it on PIX525?

[mostiguy]

I don't think there is any way to do that. Why do you want to?

[adul]

My customer want to check status server that alive or not. But he has snort IDS so someone in outside cloud ping packet by big size then snort will alert. someone told me that we can control packet at router, right?

[mostiguy]

if it is snort that causes false alarms, disable or edit the rule that throws the alert

[adul]

OK. I will try it.