SSL RemoteAccess Static IP Question (i know of the feature request)

Question

1) I voted, and still wish for: 
 RemoteAccess: Static IP for SSL-VPN 
 https://ideas.sophos.com/forums/17359-astaro-security-gateway-feature-requests/suggestions/178371-remoteaccess-static-ip-for-ssl-vpn?ref=title 
 2) I setup a SNAT and also a DNAT rule on my "LocationA" sophos utm FW (9.5.x) to translate my vpn user to a static IP. Logging initial packets, i see this works, though the FW Log at "LocationA" never shows my static IP, only the VPN Pool IP when i access devices behind the FW....which ties into.... 
 LocationA has a Site2Site with LocationB. LocationB explictly for testing only allows my Static IP access to the webadmin (not my VPN Pool IP), and it fails. the livelog at LocationB also only shows my VPN Pool IP (and its subsequent denial) when attempting to access WebAdmin (i see this through a separate connection/machine to webadmin at locationB) 
 What'd i miss?

BAlfson · Answer

Thanks, Jared - I know you described that, but I'm a visual-tactile and I would have had to create a diagram to understand what I see now. 
 I do this a little differently. I would put an Additional Address [Jared] on the Internal interface and make the following NAT rules: 
 SNAT : jscheringer (User Network) -> Any -> Any : from Internal [Jared] (Address) DNAT : Any -> Any -> Internal [Jared] (Address) : to jscheringer (User Network) 
 This SNATs traffic from your remote session into the IPsec tunnel if the destination is in 'Remote Networks', so 'Strict Routing' must not be selected in the IPsec Connection. 
 Any better luck with that approach? 
 Cheers - Bob