Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
my virtual machine cannot ping public IPs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 79%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
amadou diallo
20
Reputation points
Hello guys,
I need help from everyone, my issue is with the public IP addresses that I cannot ping in my virtual machine.
So if anyone can help me with this.
I specified that the public IP address of my firewall is what works on my virtual machine but even that one I cannot ping.
Thank you for your understanding
Azure Firewall
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
{count} votes
-
Andreas Baumgarten 129.4K Reputation points MVP Volunteer Moderator2024-07-19T19:35:34.31+00:00 Hi @amadou diallo ,
please take a look here:
When is default outbound access provided?
Instead of ping you can use the Test-Connection PowerShell cmdlet:
Test-NetConnection -ComputerName <name or IP> -Port <xy> (e.g. 80 or 53 ,.....)
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Andreas Baumgarten
-
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
amadou diallo 20 Reputation points
2024-07-19T19:58:06.84+00:00 I tried with that, but it still doesn't work with
-
KapilAnanth 49,851 Reputation points Moderator2024-07-22T09:20:28.1966667+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
Outbound ICMP Pings are possible only when the VM has a dedicated Public IP attached to it's NIC.
If you are routing traffic via an Azure Firewall, outbound ICMP Pings will not succeed.
The recommendation is to instead use TCP Ping (with port) such as Telnet or Test-NetConnection.
For this, the Firewall should have an allow rule configured in the Network Rules for target IP and target Port.
- If your requirement is ICMP Ping only, then you should not route traffic via the Azure Firewall and attach a dedicated Public IP to the VM
- NOTE : NAT gateway also cannot assist you with ICMP Ping.
Thanks,
Kapil
Please Accept an answer if correct.
Original posters help the community find answers faster by identifying the correct answer.
-
KapilAnanth 49,851 Reputation points Moderator
2024-07-24T07:59:38.6166667+00:00 - If your requirement is ICMP Ping only, then you should not route traffic via the Azure Firewall.
- Instead attach a dedicated Public IP to the VM and directly access the internet
However, the recommendation is to use TCP Ping in Azure for any internet bound traffic.
For TCP Traffic from Windows VMs,
- Open Powershell and use Test-NetConnection
- The command is
Test-NetConnection -ComputerName <FQDN/IP> -Port <PortNumber> - E.g.
- Test-NetConnection -ComputerName www.google.com -Port 443
- Test-NetConnection -ComputerName 8.8.8.8 -Port 443
Cheers,
Kapil
Please Accept an answer if correct.
Original posters help the community find answers faster by identifying the correct answer.
Sign in to comment
Sign in to answer