It would be really tough to guess what would happen if the VIP was set
to any interface. What would be the new assumed input interface? What
set of policies would the Fortigate scan to figure out if the flow is
allowed and what features to apply? Yik...
I figured out exactly what causes this behavior. I had to start a ticket
with support to figure it out. If you have this...config firewall vip
edit "vip-server1" set extip 203.0.113.1 set extintf "wan1" set mappedip
"192.0.2.50" next ...it is not "at...
