you shouldn't need to make any adjustments at all, no-one does, the nat traversal is part of MBG if you have licenses.
check your event logs, make sure you don't have license failure alarms.
Otherwise, make a test call, grab /var/log/tug/tug.log (from the 'view log files' panel) and contact support (or share them so I can take a look).