I built out a new R80.10 ClusterXL gateway (using previous cluster's policy). When I attempt to connect to the remote access VPN using the Virtual IP of the cluster, return traffic is sent back via the physical IP address of the gateway, not the virtual IP. I feel like I just missed a checkbox somewhere, but am not sure where to look. IPSEC gateway to gateway tunnels work fine. I have verified that RADIUS authentication is working and properly authenticating. SSL VPN hangs when authentication is successful (I believe it is because the site is no longer listening on the virtual IP). If anyone has any suggestions, I would really appreciate it.