PIX firewall and ICMP

["Cat Thrasher" <isd607 () co santa-cruz ca us>]

Please advise your opinions on my problem. I had a permit statement on the PIX that would allow ICMP from any to any. 
Since being hit with Nachi, I turned it off. I am being asked my policy on when it will be turned back on. I have a 
rather large network and many "divisions" who work independently, yet access the internet thru "my" PIX. They like to 
use ping when trouble-shooting.
Can I get an opinion on whether or not I should turn this back on...
Thanks 

Cat Thrasher
Network Support Analyst
County of Santa Cruz
831-454-5367
cat.thrasher () co santa-cruz ca us


---------------------------------------------------------------------------
----------------------------------------------------------------------------