Insights reporting incorrectly?

[FingerlessGloves]

Hi Guys,

I've been looking through my insights data and I think I've found a bug or something anyway?

So I've got my 192.168.20./24 network which is its own VLAN and interface set to access the internet via a VPN gateway.
Ipleak.net and any other IP service shows VPN's IP not my WAN IP. Which is good and how I want it.

The Firewall rule which allows the network access to the internet has the gateway set as the VPN gateway and has a local tag set "NO_WAN_EGRESS".

In the float rules I have a rule set so if it sees traffic exiting the WAN with the tag "NO_WAN_EGRESS" it drops the data. So if for some reason the VPN drops the traffic can't escape via the WAN interface.

When I look at my insights, I see traffic for 192.168.20.70 coming from my WAN interface. How is this possible?
I have no Port forwarding going to this network at all.

Attached you will see my NAT and an export some example reported traffic.
VPN_Network is alias of 192.168.20.0/24
Our_Network is alias of 192.168.20.0/24,192.168.10.0/24,192.168.2.0/24

Does anyone know why this is happening? looks to be a bug to me?

Jonny