The IPsec tunnel works.
Can ping across tunnel from both sides, however, the UDM itself pings over the WAN and not the VTI (IPsec tunnel) interface.
How can I get the UDM to route through the tunnel?
From the LAN on the UDM side over tunnel:
From the UDM itself: