The IPS continuously logs the detection of an ICMP ('host unreacheable') whose source is the firewall itself, marking it as reconnaissance attack. The ICMP is originated because of an host in one zone that trie to contact a switched-off host in another zone. The XG firewall then sends the ICMP to the originating host. This is uncommon. Normally a firewall considers its traffic secure and unrestricted.
This thread was automatically locked due to age.