Check the firewall logs, the NAT will show up in white when it's hit and if you go to the firewall rules and change the view to "Auto created firewall rules" and edit the firewall rule for that NAT and set logging on it. Then you can see what the NAT does and what the firewall does after it's NATed.
↧