I'm routing external traffic through a SNIP on the external interface. This way I'm able to get the "Test STA" to be OK in Citrix Cloud. https://cdn.discordapp.com/attachments/616324298935631942/1448666185666269314/image.png?ex=693c1705&is=693ac585&hm=110db0c1c667d383787d4346e9d45055bc6bd9c43689081fc22f39f65388f738&