Palo Alto Site to Site VPN ipsec tunnel up but unable to ping Source to destination

surya_sapui — Wed, 13 May 2026 09:35:32 GMT

Dear Team,

When I am doing implement Site to Site VPN ipsec tunnel then tunnel status is down & Ike gateways is down after test commands manually trigger negotiation, then all up. But still source to destination unable to ping.

Already on virtual router point to tunnel interface for all traffic on both firewall. On security policies allow both zone on both firewall but still same. Allow ICMP on tunnel interface & other physical interface. Please help what should i do next.

All configuration are attached for your reference.

topic Palo Alto Site to Site VPN ipsec tunnel up but unable to ping Source to destination in Next-Generation Firewall Discussions

Palo Alto Site to Site VPN ipsec tunnel up but unable to ping Source to destination