Access webserver from LAN / SSL VPN at public ip behind WAF

Hello all,

we are using a XGS 2100 with os19.

Simple network.

WAN. LAN. DMZ and SSL VPN.

Configured a webserver with WAF rule located in the DMZ. So far works fine from external users accessing the webserver on its public ip.

The clients in LAN and SSL VPN resolve the website hostname and receive the public ip address. They are not able to load the website. It keeps loading and loading. Looks like LAN / SSL VPN -> External IP --> WAF --> DMZ is not possible without additional configuration.

For testing purpose I created a static DNS entry with the webservers private ip and created a additional FW Rule to allow HTTP to the webserver in the DMZ.

Works fine, but I would like to have all HTTP traffic to the webserver going through the WAF.

Any ideas to get this confi working?

Thanks and thank you all for the great content in this community.