 Re: ext vip address showing for internal pings
sorry, half asleep this afternoon :-)
you can't negate nat rules, only security rules.
add another nat rule ABOVE your exsisting rule as follows
source dest xlatesource xlatedestination
localnet localnet original original |