can you show example output and note the version you are using ? bridge rap or cpsec cap ?
in my lab 6.4.x bridge cpsec cap not showing any flags for reachable icmp, unreachable tcp from ap side dp session table - there may be something buggy in here wrt flags it seems
>> ex ping and ssh from cap bridge client to unreachable IP
(sg-3200) #show datapath session ap-name ap105-24:78 | include 22,Flag
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
1.2.3.4 172.16.1.25 6 22 53509 0 0 0 0 dev15 20 0 0
1.2.3.4 172.16.1.25 1 2 0 0 0 0 0 dev15 8 0 0
1.2.3.4 172.16.1.25 1 1 0 0 0 0 0 dev15 20 0 0
172.16.1.25 1.2.3.4 6 53509 22 0 0 0 0 dev15 20 0 0
172.16.1.25 1.2.3.4 1 2 2048 0 0 0 0 dev15 8 0 0
172.16.1.25 1.2.3.4 1 1 2048 0 0 0 0 dev15 20 0 0
>> ping from CLI to reachable bridge cap client
(sg-3200) #ping 172.16.1.25
Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 172.16.1.25, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4.411/7.658/20.38 ms
(sg-3200) #show datapath session table | include 172.16.1.25,Flag
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
172.16.1.154 172.16.1.25 1 11 2048 0/0 0 0 0 local 1 1 120 FCI
172.16.1.154 172.16.1.25 1 13 2048 0/0 0 0 0 local 1 1 120 FCI
172.16.1.154 172.16.1.25 1 12 2048 0/0 0 0 0 local 1 1 120 FCI
172.16.1.154 172.16.1.25 1 15 2048 0/0 0 0 0 local 1 1 120 FCI
172.16.1.154 172.16.1.25 1 14 2048 0/0 0 0 0 local 1 1 120 FCI
172.16.1.25 172.16.1.154 1 11 0 0/0 0 0 0 local 1 1 120 FI
172.16.1.25 172.16.1.154 1 15 0 0/0 0 0 0 local 1 1 120 FI
172.16.1.25 172.16.1.154 1 14 0 0/0 0 0 0 local 1 1 120 FI
172.16.1.25 172.16.1.154 1 13 0 0/0 0 0 0 local 1 1 120 FI
172.16.1.25 172.16.1.154 1 12 0 0/0 0 0 0 local 1 1 120 FI
(sg-3200) #show datapath session ap-name ap105-24:78
Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
--------------- --------------- ---- ----- ----- ----- ---- --- --- ----------- ---- --------- --------- ---------------
172.16.1.25 172.16.1.154 1 11 0 0 0 0 1 dev3 45 0 0
172.16.1.25 172.16.1.154 1 15 0 0 0 0 1 dev3 45 0 0
172.16.1.25 172.16.1.154 1 14 0 0 0 0 1 dev3 45 0 0
172.16.1.25 172.16.1.154 1 13 0 0 0 0 1 dev3 45 0 0
172.16.1.25 172.16.1.154 1 12 0 0 0 0 1 dev3 45 0 0
172.16.1.154 172.16.1.25 1 11 2048 0 0 0 1 dev3 45 0 0
172.16.1.154 172.16.1.25 1 13 2048 0 0 0 1 dev3 45 0 0
172.16.1.154 172.16.1.25 1 12 2048 0 0 0 1 dev3 45 0 0
172.16.1.154 172.16.1.25 1 15 2048 0 0 0 1 dev3 45 0 0
172.16.1.154 172.16.1.25 1 14 2048 0 0 0 1 dev3 45 0 0
rap bridge behaving the same as above.