This article clarifies that on EX4400 switch, there is a product limitation where you cannot filter certain traffic with a firewall filter applied in the output direction. 

• Applied below configuration on the switch

labroot@EX44-Cx1# show firewall | display set           

set firewall family ethernet-switching filter abc term 1 from icmp-type echo-request

set firewall family ethernet-switching filter abc term 1 from ip-protocol icmp

set firewall family ethernet-switching filter abc term 1 then accept

• During commit operation we see the specific configuration is not supported.

labroot@EX44-Cx1# commit 

[edit interfaces et-0/2/0 unit 0 family ethernet-switching]

 'filter'

  Referenced filter 'abc' can not be used as icmp-type not supported on egress

error: Failed to read config

commit-check failed

 commit-check failed

error: configuration check-out failed

You cannot filter icmp-type (echo-request & reply) with a firewall filter applied in the egress direction. This limitation applies to control traffic for protocols ICMP (ping).