Log shows incorrect interface for site to site traffic wrong policy allows the traffic

PeterUK

USG FLEX 200H V1.10(ABWV.1)

In my setup I have USG60W

VLAN4093 192.168.252.0/23

with tunnel FLEX200H Ge3 192.168.254.10/29 as WAN to LAN2 192.168.254.9/29 on USG60W

VLAN47 on FLEX200H 192.168.255.32/28

site to site in zone IPSec_VPN

when I ping 192.168.255.40 from 192.168.253.1 log show 192.168.253.1 coming from Ge3 when really it from IPSec_VPN

I can either use to allow the traffic site to site but should only be from IPSec_VPN

PeterUK

still a problem in USG FLEX 200H

V1.20(ABWV.0)

2024-04-18 14:10:29

PeterUK

Just been looking at the added zones for VPN in V1.21(ABWV.0) just checked my site to site test ping was blocked logs show it blocked and the source interface is ge3 should really match the VPN zone IPSec_VPN and my allow policy control was from WAN3 now only works with from IPSec_VPN which is correct.