Ping timeout

[HS08]

I do ping 10.103.248.44 and the ping is reply, when i do sdwan failover i can see the ping is always timeout.

We must change the ping to other host example 10.103.248.45 and the ping is reply.

Seem the fortigate icmp session to 10.103.248.44 is cached and will be reply if the cache was refreshed.

Anyone know how we can fix this?

[AEK]

Can you share the output:

show full sys global | grep snat

[HS08]

the result is "set snat-route-change disable"

[AEK]

Can you enable it and try again?

[HS08]

event the traffic is no natted?

[AEK]

In that case, forget about it.

[HS08]

so have other idea?

[AEK]

Can you check if preserve-session-route is enabled for each SD-WAN interface members?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enabling-the-preserve-session-route/ta-p/1...

[AEK]

You may check firewall-session-dirty as well.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Information-about-firewall-session-dirty/t...