Block ICMP for Virtual Server

Here is an untested iRule way

 
 when CLIENT_ACCEPTED { 
   if { [IP::protocol] == 1 } { reject } 
 } 
 

There is also another way which I have done on Linux only, but it applies to all addresses

As superuser, add the following lines to /etc/sysctl.conf:

net.ipv4.icmp_echo_ignore_broadcasts = 1

net.ipv4.icmp_echo_ignore_all = 1

Then run the following command to cause it take effect immediately

sysctl -p

This change will persist through a reboot. But would need to be reset after an upgrade.

Hope this helps

CB