can ping from behind fortigate but not the other way around

device: FortiGate 101E

v6.2.3 build1066 (GA)

Hey tox,

some additional information might be useful to determine why pings are only possible in one direction - what did you check already, did you try pings from the FortiGate directly (if yes, are they working?), what does your configuration look like?
You can check the following:
- do you have a policy for the non-working direction in place, with correct source/destination/interfaces/etc?
- does your FortiGate have appropriate routes configured/learned to be able to pass the ping?
- can your FortiGate ping the PCs in question?

#execute ping <IP>

- do you allow ping in whatever firewall is running on the PCs?

For basic troubleshooting on the FortiGate, you can use the following tools:

- debug flow (lets you figure out if a route is found, and a policy is matched)
https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/54688/debugging-the-packet-flow

- diag sniffer (lets you confirm that traffic arrives at and exits the FortiGate)
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222?externalID=11186

A general overview of steps you might want to follow:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connectivity/ta-p/192560

I hope that helps :)

from the CLI i can ping both PCs 

from the screenshot, i can send a ping from PC2 to PC1 without any problem

i cannot send a ping from PC1 to PC2 

i added a policy that allows ICMP which allowed me to ping from PC2 to PC1 

does your FortiGate have appropriate routes configured/learned to be able to pass the ping?

i added the policy to all interfaces to allow ICMP 

from the links you sent i tried to investigate as much as i could, my knowledge is limited in FortiGate 

ok so, I don't want to ping anything on this planet AT ALL, I ended up breaking the whole network, 2 FortiGate  101E 12 fortiAP, and basically the whole thing,by mistake of course:DD

I spent a good 25 hours fixing everything with my whole team

i will never ping anything ever again ever.

Thank you all for your help