Firewall rules and policy

Question

Hi, I am wanting to block the IOT network (xxx.xxx.5.xx/24) from pinging the default gateway of other networks so created a firewall rule to do so however when testing, devices in the IOT network are still able to ping the default gateway of other networks. I have also used the policy tester to test this and it is not picking up the firewall rule. 
 I have tried putting the firewall rule at the very top to make sure that it would pick it up. 
 
 I have attached images of the firewall policy created. Any help would be much appreciated.

Prism · Answer

Charlie Dodd said: Ok thank you. By doing that will that disable pings altogether on that network? For example, would the LAN Zone still be able to ping devices in the IOT network if that setting is disabled? 
 It will only disable ping to the Firewall, It won't affect the devices within that zone.

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 I recommend that you create a separate zone for the IOT devices instead of using Source Zone Any and disable PING from the ACL for this new zone. 
 ACL has precedence over the Firewall Rules. 
 Regards,

Firewall rules and policy

Top Replies