Any issues with Meraki MX67 to FortiGate VM in Azure Site-to-Site VPN

[francoh]

We are mostly cloud but do have a DC in our datacenter. We are about to acquire a firm that just bought Meraki firewalls and need those offices to have site-to-site VPN connected into our Azure Datacenter.

The plan is to just connect an IPsec VPN from the Meraki to our Azure VM FortiGate but have heard this doesn't work well has so many issues. Anyone have an IPsec VM between FortiGate and Azure?

[Toshi_Esumi]

A quite a while ago, I tested it with an old MX60 to one of chassis based FGT model. At that time, one thing for sure not to work/not supported was IKEv1 aggressive mode/dialup. I was not sure if it can support IKEv2 dynamic but I never tested it. I tested only IKEv2 static.
I think that was the bottom line and once it came up, no trouble like instability I experienced for short time testing period.
If you install FortiGate VM into Azure space, probably not much difference with installing a chassis FGT into Azure.
But nonetheless, I would try avoiding Meraki MX as much as possible if it's in a mix with other vendor FWs/routers. Some cases however it's not possible if that's the customer's choice. That's why I tested it. Luckily it was avoided at that time.

Toshi