No network connectivity after successful Azure Active Passive HA failover

• Azure Active Passive HA failover successfully completed.
• The floating IP addresses are correctly moved over from FW1 to FW2 with no error
• Flow basic shows successful packet transmission of 3-way handshake completion. 
• Although the above things look correct, Azure tenant cannot reach out to internet.
• GlobalProtect (GP) client can log on GP gateway but with no connectivity.
• Traffic seems to have been lost in Azure backend.

• VM Series Firewalls
• High Availability (HA) Active/Passive Setup
• Azure Platform
• Supported PAN-OS and Plugin versions

IP forwarding is not turned on on Azure NICs that need to perform NAT.

1. Turn on the IP forwarding on Azure,
2. On Azure console, go to VM >Network Interface >IP Configuration
3. Check IP Forwarding is enabled.   
4. No reboot required.