Thanks,
Could you tell a little bit more about it?
From the Policy, we can see this:
358: user any 6 0-65535 80-80 d1f90,0000 f80021:permit dnat
Anyone from the User-table tried to reach any IP with a tcp port 80, then hit this policy.
From the WebUi, it shows dst-nat 8081.
Does this dst-nat 8081 mean the vlan interface IP only?