IP NAT Pool NOT applied on SPLAT Cluster when SC is NGX

[slowfood]

After upgrading our Windows 2003 based SmartCenter from R55 HFA_17 to NGX HFA_03, the IP NAT Pool is no longer applied when SecuRemote Users connect to the HA-Cluster running on a SPLAT with R55HFA_17. No changes were made to the cluster except re-compliling the policy.
Any ideas are welcome

[slowfood]

The problem has been identified and solved!

The cause of the problem was not the cluster, but on the cluster we had the only SecuRemote rule which had nested user groups.
Fact is: If you compile the policy on a R55 SmartCenter, a SecuRemote rule containing nested user groups works, whereas if you compile the same policy on an NGX SmartCenter, the rule does not work when installed on the R55 gateway, regardless whether it is a cluster or not. The user's can authenticate, but the first access rule gets dropped on the cleanup rule!!!
The workaround is to add additional rules and de-nesting the user groups.

You might consider that when upgrading to NGX SmartCenter

Cheers