Problem with VIP

Hi everyone,

we have a setup of two Fortifate 40F in a Cluster (which is working fine) but I can't get VIPs to work.

I already setup a Firewall policy to allow VIP-traffic (with the webserver IP in VLAN XY as destination) besides the VIP-rule which looks like:

0.0.0.0 -> 10.75.0.201 (TCP: 80 -> 80). It is bound to the interface of the Fritzbox (Vlan 52). The Fortigate has the interface IP 192.168.178.2 and the fritzbox does a NAT (exposed host) of all traffic towards the Fortigate interface. IPSec connections to the public IP of the fritzbox are possible but I can't access a http host to work - does somebody have an idea?

Best regards,

Jan