we have a number of Sonicwalls and fortigate at our other sites and also connections to Azure and we had been waiting on the route based availability for the FTD to be released to convert to using route based. Now it has we have done the upgrade and now looking to change the tunnels to route based. we attempted this to both a sonicwall and the fortigate and the all went well tunnel is up ACLs created and static route to the sites through the VTI interfaces all good except i can get traffic out to the other end and back but any traffic coming in seems to get dropped we can see this with the packet tracer have we missed anything as i say there is a route and a outgoing and incoming ACL. Also when we created the interfaces we created a new security zone for them for the ACLs to applied against.
here is partial output
