End of incoming ICMP (“pings”)
In order to further reduce the exposure of the CERN networks and their devices to the Internet, the Computer Security Team has decided to block ICMP ("ping") requests from the Internet towards devices connected to the CERN office network (GPN) and the CERN wireless network.
This should counter the threat of external parties mapping any device connected to these CERN networks. "Pings" to servers in the CERN computer centre will remain possible for the moment, although restrictions are likely in the future. Outgoing "pings" towards the Internet and within CERN will continue to work.
The CERN networking team will implement this policy progressively during the first half of 2016. ICMP requests directed towards devices connected to the CERN wireless network will be blocked on 12 January 2016. ICMP requests towards devices connected to the CERN office network (GPN) will be blocked as of late March or early April.
