Tunnel is up and can ping remote FortiGate/Host but not opposite.

[maimaq]

On the local side FortiGate 200E is installed that has an IPSec tunnel to Azure FortiGate-appliance:

- Any host on the local side can ping the AzureFortiGate and Azure VM

- But FortiGate 200E (local) itself cannot ping AzureFortiGate's internal or public-facing interface, neither the Azure VM. 

- From the remote side (Azure-FGTVM) or Azure-VM cannot ping local FortiGate or localhost.

- Tried policy-route and SDWAN rule but that didn't help.

Thanks in advance and much appreciate if anyone can share their thoughts on what could be the problem?

[marchand]

I think you need to select the source interface , try using execute ping-options source , source interface must be FortiGate 200E local LAN .