WAF to IP behind site-to-site VPN

I have configured a webserver in Webserver Protection that is on an IP in a network behind a site-to-site VPN. It works perfectly but the server shows a firewall IP as source instead of the real IP. Is there anyway to fix this? Or is there another recommended solution?