All -- I'm changing the topology of our current DMZ environment and want to make sure that CSG works with NAT Below are hypothetical IP ranges. Incoming Connection >>> External IP >> DST-NAT >> 192.168.88.x There will be a route to allow traffic from DMZ to the Internal Network so Traffic originating from the DMZ can talk to the Citrix servers. External IP's 66.111.115.x/27 Private IP's assigned to WI/CSG 192.168.88.10 + 192.168.88.11 Citrix servers in Internal Network 192.168.5.1