after integration with Forti vmx , vms cant ping !

[Shamyy]

Hello Community ,

need your kind support as after i intergrated NSX with Forti VMX and created security group and security policy.

i noticed that vms on the same logical switch cant ping each other !

kindly note i didn't create any policy , that is the default policy and can't edit it and i cant create another one !

Thanks,

Shamy

[hansroeder]

Well, there is a DENY statement, so that might point us to the culprit.

What happens when you set the DENY statement to Allow/Permit?

[Shamyy]

no i can't edit it.

[hansroeder]

Well that's strange. Though I must admit that I don't know anything about Fortinet's

Can you create a new rule above this implicit DENY rule that allows all traffic?