Got an oddity. 7.0.0 works fine, but when I install 7.0.1 or 7.0.2 (VPN client) it connects and seems to be working.
There is even traffic passing the rules on the FG.
But the remote client fails.
Roll back to 7.0.0 and it's fine.