DESCRIPTION: Syslog data not forwarding over the VPN to the the GMS server.
CAUSE: Syslog data not being sent via the VPN and the packet capture showing as being generated from the WAN interface. This error can occur if the default LAN interface X0 isn't being used as the firewall requires this to generate some data.
To resolve the issue of sending Syslog data via the VPN when the X0 interface is not included in the VPN.
You need to add the X0 interface into the Local Subnet on the VPN used for the remote GMS server.