Google, yeah sure kid. When you are applying a security rule to a destination NAT, do you reference the post or pre-NAT ip? If you were any kind of professional at all you would have already picked up on the technology I administrate.