What is the RADIUS server? Why are you sending RADIUS over the WAN? Is
it over an IPSec tunnel I hope? What is the CoA for? Managed switch?
Managed AP? FortiClient SSL VPN?
Multiple users connecting to the FortiGate from potentially the same
egress IP. In theory it shouldn't cause any issues but depends on how
the CGNAT is deployed.