New BlackNurse attack technique can be used to launch low-rate DoS attacks by sending ICMP packets or ‘pings’ that overwhelm processors on servers protected by firewalls from Cisco, Palo Alto Networks, among others. Cisco ASA 5506, 5515, 5525 (default settings) and 5515-X (latest generation) Cisco Router 897 (can be mitigated) SonicWall (misconfiguration can be changed and mitigated), some unverified Palo Alto devices (wireless attack from LAN side)
Source: https://thehackernews.com/2016/11/dos-attack-server-firewall.html