Have you reviewed the connections table in case there is an old session without NAT for this? Sometime ago I had that problem and had to clear the specific connection (clear all connections table also works).
The connection on fw monitor should be seen as something like this if the LAN users are pointing to external address to access the server (dont forget to disable SecureXL):
[internal_interface.i] 192.168.0.0/24:xxxxx --> Extern .122:443
[internal_interface.I] 192.168.0.0/24:xxxxx --> DemoLEMiCCE:443
[internal_interface.o] 192.168.0.0/24:xxxxx --> DemoLEMiCCE::443
[internal_interface.O] 192.168.0.1:xxxxx --> DemoLEMiCCE:443
The following conditions are assumed on this scenario:
- The server DemoLEMiCCE is on the same 192.168.0.0/24 subnet.
- The address on the gateway object is 192.168.0.1 or a new object with this address was created.
- The first manual NAT rule for Source Translation of the LAN is working as Hide NAT.
- The option NAT --> Manual NAT Rules --> Translate destination on client side is enabled in Global Properties.