Hi Andrea, thanks for your patience here. I ran this past one of our engineers and in general they'd like it if we could open a case for this, they have a lot of follow up questions and it's just easier if we can keep all of the information in a case. In general, we do support NATing GRE traffic. We NAT GRE traffic for layer 3 roaming by default.