NSv in Azure: Cannot RDP or ping through virtual firewall

06/24/2021 0 703

DESCRIPTION:

Devices on X1 could not RDP or ping devices on X0, or vice versa. Even though the firewall itself is able to ping to devices on X0. 

Packet monitor in virtual firewall showed traffic was forwarded to destination but no reply.

CAUSE:

Though virtual firewall showed network traffic was forwarded, it did not reach destination.

RESOLUTION:

The solution is to enable the IP forwarding on virtual firewall interfaces which are involved in the Ping or RDP. In this example , X0 and X1.
The instructions and images below will help the administrator in navigating to the settings:

- In the Azure Portal, select virtual firewall (NSv)

- Select Networking, then X1 interface

- Click on the network interface name shown next to the "Network Interface:" 

- Select IP Configurations

- Then toggle the IP forwarding setting from Disabled to Enabled. Click save