Share via

Allow ICMP over Azure APPGW - Firwall

Anonymous
2023-01-04T13:46:41.327+00:00

Hello colleagues,

We are using an Internet breakout solution which looks like below:

Internet > AzureFw > Azure APPGW > LB > IPS > Azure vnet that contains Backends on which WebApps are being hosted, one of this applications for example is speedtest.mycompany.com which is working now, a request came to enable ICMP so user can do the ping(icmp) test to this URL so they see the response time etc ..., is it possible to implement?
is it possible to Ping URLs hosted in Azure?

Azure Application Gateway
Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

Azure Web Application Firewall
0 comments No comments
{count} votes

Answer accepted by question author
  1. Joe Carlyle 661 Reputation points MVP
    2023-01-04T15:14:58.837+00:00

    Based on your setup, ICMP is not possible due to Application Gateway. There may be an alternative in terms of testing, but not when app gateway is included.

    There is a community site which details latency based on region if that helps? https://azurespeedtest.azurewebsites.net/


2 additional answers

Sort by: Most helpful
  1. msrini-MSFT 9,306 Reputation points Microsoft Employee
    2023-01-04T15:44:24.397+00:00

    Hi,

    When you use ping speedtest.mycompnay.net:443 from your application, it doesn't use ICMP. Instead it uses TCP port 443.

    ICMP doesn't have any ports. You cannot use ICMP, you can use any layer 4 connectivity tools.

    Regards,
    Karthik Srinivas

    1 person found this answer helpful.

  2. Reza Alirezaei 21 Reputation points
    2023-05-11T08:09:07.4933333+00:00

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.