topic Re: No ping response from AAD in Next-Generation Firewall Discussions

No ping response from AAD

ciscojuniperf5 — Sun, 25 Jan 2026 06:07:14 GMT

I have a rule in Palo Alto PA 440 running 11.2.6 to allow 'any' to Azure AD. I see only DNS responses from Azure AD. For ping and LDAP packets received is zero. The traffic is hitting the right rule though. I did a packet capture I don't see ping request on the transmit stage on the firewall. Ping and LDAP working from another site. How do I fix this.

Re: No ping response from AAD

arusharma — Mon, 26 Jan 2026 04:53:37 GMT

First, verify the routing to ensure there is no asymmetric routing in the network.
You can identify the correct egress interface for the traffic using the following command:
test routing fib-lookup virtual-router default ip 8.8.8.8
If the monitor logs show 0 bytes for return traffic, it likely indicates that the return path is taking a different route. Do you see any drops in packet capture?

Re: No ping response from AAD

ciscojuniperf5 — Mon, 26 Jan 2026 15:15:27 GMT

There are no drops and 0 bytes for return traffic

Re: No ping response from AAD

ciscojuniperf5 — Mon, 26 Jan 2026 15:43:31 GMT

Thank you for your response. This issue is now resolved. A route to this site subnet was missing in Azure, it started working once the route was added in Azure