I have a requirement to send traffic to another server on the private side using the VIP address. I understand source groups need to be defined for this requirement to NAT the source ip address of server. There is also a requirement to send traffic to the public side using the CSS as a router. The server has a default gateway of the CSS. Do I need to configure an acl to use a content rules and source group for connection to a VIP and another statement in the rule to also allow all other traffic to the public side.
