If a path shows sustained packet loss, look at its latest diagnostic to understand where the loss is occurring:

  • If the loss is occurring at the last hop, make sure that firewall/endpoint protection at the target allows icmp.
  • If the loss is occurring mid-path, make sure routing policies are not de-prioritizing icmp, and access control lists are not blocking icmp. Mid-path firewalls might also be impacting end-to-end performance with respect to bursty data.

In any case, ICMP limitations might not affect production traffic. Set up a dual-ended path to test whether other protocols are affected.