Hi you can block ICMP in the Extended Networking policies.
whenever a user pings somewhere or tracerts, the outbound ICMP packet will make it out, but WinGate will be notified of the "connection", and if it is banned, will immediately delete it, so the ICMP replies will be blocked by the firewall.