Azure VPN Site to Site Connection Issue from On Premise to Azure

Hello Guys,

So the issue is that I have Successfully create Site to Site Gateway from my Azure VMs to my Local VMs, and already Connected even have in & out data traffic.

My Azure VMs can ping to Local VMs

But on the other hand, my Local VMs Cannot ping (psping) / telnet (ex: 3389 (rdp port)) to my Azure VMs. Here is theTracert Result :

All VMs Windows Firewall already turned off, and in Fortigate there is no filtering rule except allow traffic via tunnel azure.

I tried already:

* Reset Azure VPN Gateway

* Allow Any Any on Azure NSG Inbound Rule

* Successfully psping / telnet to the VMs Public IP

* as Azure VM can ping/telnet to my OnPrem VM, i try join domain Azure VM to onprem Domain, and success (i dont know if this normal).

Any Clue ? :) thanks before