Log shows incorrect interface for site to site traffic wrong policy allows the traffic

PeterUK

USG FLEX 200H V1.10(ABWV.1)

In my setup I have USG60W

VLAN4093 192.168.252.0/23

with tunnel FLEX200H Ge3 192.168.254.10/29 as WAN to LAN2 192.168.254.9/29 on USG60W

VLAN47 on FLEX200H 192.168.255.32/28

site to site in zone IPSec_VPN

when I ping 192.168.255.40 from 192.168.253.1 log show 192.168.253.1 coming from Ge3 when really it from IPSec_VPN

I can either use to allow the traffic site to site but should only be from IPSec_VPN

PeterUK

still a problem in USG FLEX 200H

V1.20(ABWV.0)

2024-04-18 14:10:29