Accessing an Azure site-2-site connected webserver via fortigate

Hello,

I have a problem with port forwarding on Fortigate to an Azure webserver. The Azure network is connected via a site-2-site VPN and I would like to have it accessible from the internet. I think that the problem is with the VPN tunnel between Fortigate and Azure.

With the servers located on the local subnet I have no problems at all.

Here is how it all works:

Green lines are LAN\VPN connections - all work fine. Black line - connection through WAN - all good

Red line - packets forwarded from internet by forti to azure  - does not work