Firewall policies
Standard firewall policies should be configured on the hub and the branches. On the hub, make sure that traffic is allowed from the overlays to the Datacenter network and the loopback interface.
See Policies in the FortiOS Administration Guide for information about configuring policies.