Yeah, that was my thought. Does everyone really think that the companies building these security platforms haven't thought of this? It's not an obscure protocol or anything, and ICMP has plenty of other potential abuses that would lead network admins to block it.