Thanks all. I was hoping the vMX would be an edge device. However given it isn't, i have just deployed a NAT gateway and load balancer in my vnet. The vMX is just dealing with routed traffic. What is the logic behind the vMX not being able to be an edge firewall and look after all my traffic?   ... View more

Sorry for the radio silence OK, so I have put it into VPN Concentrator mode and that seems to have worked. Many thanks for the help.  ... View more