Unable to see ping replies on SRX CLI when pinging anything from SRX's interfaces.

However, we do see responses received on SRX.

When we ping any connected/Internet IP from the interface of SRX, we do not see any response.

However, when we use the command "monitor traffic interface <>" or when we check "show security flow session destination-prefix <>", we see the traffic in both IN and OUT directions. We also see the packet count on the session created.

There will be no output for "monitor security packet-drops destination-prefix <>"

Configuring flow trace will show the packets are passing properly and are not dropped.

If we check the Junos flow, after the session is created, there will be two parameters applied - The packet filter and the packet shaper.

If the packet is getting dropped by the packet filter applied in the output direction of the exit interface, we see the above symptoms.

The flow will be completed, hence, any traces or monitor commands will not show the drops.

Check and correct the firewall filter to accept the interesting traffic.