Watchguard V10 User Manual page 240

CHAPTER 8: About Security Policies
2
Click one of the following options:
Use Global Settings
Use Per-Policy Settings
3
Click the Log tab.
208
Selecting this option enables the ICMP error
handling global policy settings configured using
the System Configuration button. For more
information, see "Advanced Configuration" on
page 129.
Selecting this option allows you to define ICMP
error handling parameters particularly for this
security policy, effectively overriding any global
settings you may have configured. Click one of the
following options: Allow All ICMP Errors or
Allow Specified ICMP Errors. Selecting the latter
allows you to define which ICMP error messages
will be allowed through the Firebox Vclass
appliance.
Vcontroller