Greetings @GregoryW Can you please disable NATing on your fortigate IPsec firewall policy. Local>remoteYour IPsec interface on the fortigate doesn’t have a ip associated with it (unless you have configured one) so the NAT function won’t do you any go...

Generally speaking, simply having a device that is unused in your inventory won't go towards a license count.In the case of MX's, if you go down the HA path and add the 2nd MX to the same network with a existing MX you will still be within the licens...

Hi @Noffal Licenses are applied to Orgs not devices. If you purchased another MX64 to use in the event of a failure you could simply have the device sitting in the inventory (not assigned to a Network). If the time comes you can simply remove the fau...