I am stumped

[keithcclark71]

I am stumped why is it I can ping from a host in Site A connected to FTD inside interface  to a host in Site B ASA inside interface over S2S tunnel but I cannot ping from either side from the  FTD or ASA.  The FTD IP addresses for management and inside are on same subnet along with the host that I can ping from. This makes no sense

[Kasun Bandara]

try configuring

management-access <interface-name>

to inside interface

[Rob Ingram]

@keithcclark71 that's by design on both the ASA and FTD. The ASA/FTD only responds to ICMP traffic sent to the interface that traffic comes in on; you cannot send ICMP traffic through an interface to a far interface. Reference here.

The only exception is over a VPN, in which case you need to configure the mangement-access command already provided. You cannot configure this natively on the FTD, you have to use FlexConfig to apply the same command.