vMX in GCP through Fortigate Firewall

[RajeshR]

Hi

We have vMX in GCP and at upstream we have Fortigate firewall. 

The problem is in dashboard we can see vMX is connected and up but showing VPN registry not connected (or partially connected). We are good with policy at our upstream firewall.

Thank you

[GIdenJoe]

have you set the VPN registry port and public IP manually and then allowed it through the fortigate?

[PhilipDAth]

As @GIdenJoe says, try enabling the manual NAT traversal on the VMX (and port forward that port from the firewall).

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#NAT_Traversal