That was super helpful; sure enough every host I had connected via WAN/NAT had the LAN address of the VC server in the vpxa.cfg file. I added the preserve tag, modified the VC server address to be the WAN address, and presto, my heartbeats started coming through.
↧