Fix ACL rule
Disable source/destination check on NAT instance