Azure ASAv HA AnyConnect Client cannot ping On Premise Servers.

VuHoang · ‎04-08-2019

Hi All,

Thanks for reading the post and help me out. I currently have a Azure ASAv HA setup as follows

From the AnyConnect client PC, I can ping and get to any server in the "inside" and "dmz1, dmz2" subnet. However, I cannot figure out away to get the AnyConnect client PC to ping to my On Premise servers.

The IPSec VPN tunnel is terminated at ASA 5505 On Premise and Azure Virtual Network Gateway. The Azure ASAv HA is there only to provide AnyConnect VPN connectivity.

I did traceroute from AnyConnect client PC ( 10.2.250.3) to one of the On Premise servers in the Azure ASAv HA and get the following result

The traceroute look fine but I cannot ping any servers in the On Premise network.

What should I do to resolve the problem ?

Thanks for your help