Ok the debug file is huge. I cut a big part out and posting it below.
existing vector list 1-45e3070.
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5b0114
packet passed sanity check.
ethernet0/4:192.168.205.10/22861->74.125.45.100/2569,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.45.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.45.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.45.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.45.100, port 38906, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47618) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.45.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47618
post addr xlation: 192.168.205.10->74.125.45.100.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5bb914
packet passed sanity check.
ethernet0/4:192.168.205.10/18777->208.67.222.222/57415,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->208.67.222.222) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 208.67.222.222->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 208.67.222.222) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 208.67.222.222, port 46255, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47668) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 208.67.222.222->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47668
post addr xlation: 192.168.205.10->208.67.222.222.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5ba914
packet passed sanity check.
ethernet0/4:192.168.205.10/35933->74.125.45.100/1862,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.45.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.45.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.45.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.45.100, port 14765, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47753) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.45.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47753
post addr xlation: 192.168.205.10->74.125.45.100.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5c3914
packet passed sanity check.
ethernet0/4:192.168.205.10/2655->74.125.45.100/30789,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.45.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.45.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.45.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.45.100, port 16044, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47892) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.45.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47892
post addr xlation: 192.168.205.10->74.125.45.100.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5cf914
packet passed sanity check.
ethernet0/4:192.168.205.10/59488->74.125.45.100/56388,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.45.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.45.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.45.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.45.100, port 38749, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47883) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.45.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47883
post addr xlation: 192.168.205.10->74.125.45.100.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5b3914
packet passed sanity check.
ethernet0/4:192.168.205.10/26210->74.125.45.100/16196,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.45.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.45.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.45.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.45.100, port 44124, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47872) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.45.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47872
post addr xlation: 192.168.205.10->74.125.45.100.
flow_send_vector_, vid = 0, is_layer2_if=0
****** 1913408.0: <Secure_WEB/ethernet0/4> packet received [84]******
ipid = 0(0000), @1d5a4914
packet passed sanity check.
ethernet0/4:192.168.205.10/34378->74.125.67.100/14346,1(8/0)<Root>
no session found
flow_first_sanity_check: in <ethernet0/4>, out <N/A>
chose interface ethernet0/4 as incoming nat if.
flow_first_routing: in <ethernet0/4>, out <N/A>
search route to (ethernet0/4, 192.168.205.10->74.125.67.100) in vr trust-vr for vsd-0/flag-0/ifp-null
[ Dest] 31.route 74.125.67.100->66.xx.xx.xxx, to ethernet0/2
routed (x_dst_ip 74.125.67.100) from ethernet0/4 (ethernet0/4 in 0) to ethernet0/2
policy search from zone 103-> zone 1
policy_flow_search policy search nat_crt from zone 103-> zone 1
RPC Mapping Table search returned 0 matched service(s) for (vsys Root, ip 74.125.67.100, port 56656, proto 1)
No SW RPC rule match, search HW rule
Permitted by policy 18
No src xlate choose interface ethernet0/2 as outgoing phy if
no loop on ifp ethernet0/2.
session application type 0, name None, nas_id 0, timeout 60sec
service lookup identified service 0.
flow_first_final_check: in <ethernet0/4>, out <ethernet0/2>
existing vector list 1-45e3070.
Session (id:47583) created for first pak 1
flow_first_install_session======>
route to 66.xx.xx.xxx
arp entry found for 66.xx.xx.xxx
nsp2 wing prepared, ready
cache mac in the session
make_nsp_ready_no_resolve()
search route to (ethernet0/2, 74.125.67.100->192.168.205.10) in vr trust-vr for vsd-0/flag-3000/ifp-ethernet0/4
[ Dest] 9.route 192.168.205.10->192.168.205.10, to ethernet0/4
route to 192.168.205.10
flow got session.
flow session id 47583
post addr xlation: 192.168.205.10->74.125.67.100.
flow_send_vector_, vid = 0, is_layer2_if=0