age out error

[jeromecarrier]

Hello

I'm deploying a Palo Alto on Azure. I want to use 2 interfaces : one interface (eth1/1 configured with public-vr router) dedicated for Internet outbound (including for users connected with Globalt Protect) and one interface (eth1/2 configured with gateway-vr router) dedicated for VPN access (site-2-site or for Global Protect access). Each interface has an public IP provided via Azure. I have the following diagram and I provide the current virtual router configuration.

I configured the Global Protect Gateway and portal to use eth1/2 and when I try to reach the portal, I have na age error issue :

Global design

public-vr configuration:

gateway-vr configuration

Any ideas ?

BR

Jerome