Prab,were you able to retain the source ip of the client with your
design? it appears that the fortigate performs a NAT of the traffic
prior to utilizing the WCCP function, thus losing the source ip of the
client and thus prior to hitting the firewal...
