Hi thanks Guys,
ticket with TAC is 6-0003125417
I was on the phone with CP for two hours today.
When they edited the file the "masters" file and replaced the "log" name with the ip address of the mgt server, logging started straight away.
As soon as i pushed a policy it stopped working.
The command cpstat fw -f log_connection showed the floating public ip address as the log server after the policy was pushed which is the issue.
When they edited the masters file with the local mgt ip address it was working which was correct.
They suggested setting up a no nat rule from the fw's to the mgt server ?
They then said to hold fire on this whilst they investigate further. Thoughts ?