L2L VPN only for firewall logs?

All,

I have an XG at a customer site and I'd like to get it integrated with iView at my location. Since the current iteration of iView doesn't support encrypted syslog (Come on guys!! It's been YEARS!!) the only safe way that I know of to get those logs is via VPN. So I'm curious if what I'm thinking will work..

Customer XG<-------VPN------->My XG

LAN IP                                     LAN IP

192.168.3.1/24                        192.168.6.1/24

I'm then thinking just to keep things 'clean' to setup NATs to present over the tunnel, something like:

(Mind you I ONLY want to present the single firewall IP on the tunnel, not the LAN /24)

Customer Side

NAT IP: 192.168.150.1/32

My Side

NAT IP: 192.168.151.1/32

I'm not worried about NATing I'm just not sure the firewall will have an issue with itself being part of the tunnel, ya know?

Thanks everyone!

-Rogue