Internal/LAN device needs to show as alias WAN IP

Question

Good morning all. 
 I have a customer that has a specialized device, currently on LAN (for the sake of security we're moving to a dedicated zone on a different port; in the near future) - and all traffic to an alias WAN IP is forwarded to it (this is working fine). We need traffic LEAVING the device (& generated by, not just reply packets) for the internet to leave through the alias IP. 
 Scenario: 
 Default WAN IP (port 2) is 123.45.67.89 
 We have an alias on port 2 as 123.45.67.90 
 I created a firewall rule (at the top). 
 Source zone : LAN Source network/device: 192.168.2.100 Destination zone: WAN Destination network: ANY NAT & Routing Use outbound address : 123.45.67.90 
 Per the application reporting, it is showing public IP as 123.45.67.89 :(

lferrara · Answer

Make sure you use the proper WAN IP alias under "rewrite source address" in the firewall rule matching the source host. 
 Regards

KingChris · Answer

Hi John Woodall 
 You can also enable "source based routing using alias" option in the console of the XG. 
 To do this, you would login via SSH and go to menu item 4 "Device Console". 
 From here you can run command: set routing source-base-route-for-alias enable 
 This will enable all traffic that comes in on the alias address to use the alias address for NAT. 
 Thanks.