Hi
I found this in the "Concepts & Examples ScreenOS Reference Guide" bottom part page 1452 in the all parts pdf:
"The host to which the security device maps VIP traffic must be reachable from the trust-vr. If the host is in a routing domain other than that of the trust-vr, you must define a route to reach it."
I guess that means that it will alwas try to find a route in trust-vr first. Then i need to route the traffic back to untrust-vr to make the traffic find its way.
Do you guys agree with that conclusion?
Anyway it works now after adding a route with next hop untrust-vr for 10.238.135.227/32.