Site-magic cgnat
What
Sometimes Unifi Site-magic does not work with CGnat
Solution
You need a rule on the remote site behind CGNAT permitting Internet In with the source being the remote network and the destination being the local network. UI sucks. I came here looking for a solution and then not finding one other than site magic started poking at it with Wireshark. This fixed it for me. It's lame... but hey that's UI.
Source
Want to make this site better? Open a PR or help fund hosting costs