Many network security devices block all ICMP messages for perceived security benefits, including the errors that are necessary for the proper operation of PMTUD.
The text highlights that network security devices may inadvertently hinder the operation of PMTUD by blocking all ICMP messages, even those essential for error reporting and troubleshooting.