externally managed gateway sending logs to Private IP ( Non -routable)

[nflnetwork29]

hello there , we have external gateway (R81.10 w/ cluster Xl)  that is being managed by R81.10 MDS

The external gateway is sending logs to the private ip address of the mds /log servers. 

verified by running "tcpdump -nnei any port 257"

we have NAT enabled on the mds and log server objects and "apply for security gateway controls" enabled on both as well. 

does anyone know how to fix this?  Thx. 

[G_W_Albrecht · Accepted solution]

sk171055: Security Gateway tries to fetch the policy from / sends logs to the real IP address of the...