Are you using the Microsoft L2TP client or Cisco AnyConnect?
Are you connecting to the dynamic DNS name on the MX or a hard coded WAN IP?
Does the MX have a public IP on each WAN circuit directly configured on the MX, or is one/both uplinks plugged into something NATing to a private IP on the MX WAN interface?