Flex200 H over bridge was allowing ICMP when blocked

PeterUK

USG FLEX 200H V1.20(ABWV.0)ITS-m4447

WAN1 Ge1 Unassigned IP

DMZ Ge7 Unassigned IP

Br0 Unassigned IP

There is no rule that allows from WAN1 to DMZ for ping when I make a rule at the top of the list from WAN1 to DMZ ping block it did not block it and as for from DMZ to WAN1 it blocks fine I then checked session monitor which was not showing up anything for the bridge sessions clicked Clear all sessions now ICMP is blocked from WAN1 to DMZ