Azure VM Series - Peered VNET traffic does not go outbound

[msazure]

I have created a VM series in Azure. I could see that the traffic from trusted subnet (from VM1 in the below diagram) is able to go outbound to internet, however traffic from a peered VNET (from VMs in the subnet1 in the peered VNET in the below diagram) shows "incomplete" status in the logs. I have a route table that routes the traffic from the peered VNET (subnet) to the trusted nic. Any additional configuration is needed to get this outbound traffic working?

[dmaynard]

A return route in the FW virtual router for the peered vnet.

Security rule allowing traffic

NAT if required

[msazure]

Appreciated the quick response. 

By the return route - is it a static route to the peered VNET added to the trusted Virtual Router? Like below:

Peered VNet space (10.2.0.0/24) : Interface Ethernet 1/2 (trusted) -> Next Hop : IP Address Of the Default Gateway of the Trusted Subnet.

Security rule - since this is non prod, we have Allowed All from trusted zone to untrusted zone - anything more specific to peered?

NAT Rule - anything specific for peering?

Thanks in advance!