no NAT after Upgrade to 22.4.2 / 22.1.10

[rac-hh]

I use a Cluster as VPN Gateway. The master is a Business Ed. and the backup system is a CE.
After Upgrade access to DMZ/Internet from VPN or LAN arrived the DMZ with the private sender address (no NAT).
I used "manuell NAT" to the cluster IP, but also tried "automatic NAT".
Switching to the backup system with same Problem. Backup system was not activated with 22.1.9 - I assume the problem is also in this version as 22.4.2 is based on it.
Restoring 22.1.8_1 to get the backup system working again.

Is there some known changes that interfere with NAT?

[rac-hh]

I imported the configuration in a fresh installed 2.1.10 with cluster IPs deleted.
On this system NAT works.