admin@Server-3-HA1-cli(config)% show orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP | display set

set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP rule-disable false
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP match source zone zone-list [ Intf-SEV3-HA-LAN-Zone ]
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP match source user user-type any
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP match services predefined-services-list [ ICMP ]
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP match ttl le 10
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP set action deny
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP set session-timeout 600
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP set tcp-session-keepalive disabled
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP set lef event never
set orgs org-services Tenant-VSA security access-policies Default-Policy rules Block-ICMP set lef options send-pcap-data enable false

The same configuration using the Versa Director GUI: