Identity awareness node hiding behind the cluster

[NikFal]

I am having a problem with one of my AI nodes. I got 2 nodes, one is Active, and the other one is Standby. 
Although the Standby node does not connect to the DNS, i was checking the FW logs and I saw that the requests sent from node IP but the answers coming on the Cluster IP. 

Is there any way to identify the issue or what exactly happening, Cuz I toke the node out of the cluster and worked fine with the DNS, after that i added it back, it worked for a couple of hours then started the communication with the Cluster IP again...

[PhoneBoy · Accepted solution]

There is a "Cluster Fold" mechanism that changes how traffic originates from a node when it is in a cluster. 
You can disable it per: https://support.checkpoint.com/results/sk/sk34180 

[AmirArama]

you can also set a simple NO NAT rule from the standby member to the DNS server, it should work.