Can't stop UTM from being pinged

Question

So i went to: 
 Network Protection > Firewall > ICMP en disabled (unticked) all the options somehow the UTM can still be pinged. 
 Then added a firewall rule to block ping from internet traffic to UTM adress. Can still ping the UTM. 
 
 Any thoughts on this? 
 
 Thank you, Peter-Paul

Jay Jay · Accepted Answer

You probably guessed what my theory would be. I'm unfamiliar with fritzboxes, but a quick google search suggests it's firewall/router/wifi device of sorts. My guess is *IT* is what's responding to the pings. 
 Is it possible to remove it entirely from the equation and connect UTM's wan directly to the ONT ethernet port? Or does the fritzbox do some sort of authentication of the line? 
 Also, you can disconnect utm entirely from the equation then retest the ping. My guess is it will register a response. That means the issue is further upstream before the UTM. 
 If that is the case, maybe see what config option fritzbox has as far as not responding to pings or other firewall functions. 
 As I've learned in my at&t setup (also ftth, 1gb symmetrical), their gateway box doesn't truly do a bridge mode, but does some sort of weird natted setup where the public ip is passed onto one device, but the firewall is still doing NATting. The solution there involved recreating the authentication process the gateway was doing under utm software. You can read about it here if you like - https://community.sophos.com/products/unified-threat-management/f/hardware-installation-up2date-licensing/111868/at-t-fiber-uverse-gateway-elimination .