Traffic From Second LAN Going Out WAN Interface

[kagbasi-wgsdac]

Good-day Folks,

I have two networks that I want to keep isolated but allow a select group of PCs to be able to reach both LANs (for management).  The networks are on two separate physical interfaces on my OPNSense box.   Subnets are:

• LAN-A 10.0.10.0/24
• LAN-B 10.0.20.0/24

I have everything working thus far, but noticed that pings from LAN-B (which is the new one I created) are getting routed out the WAN interface (I confirmed with a traceroute from a host on that network).  However, from the OPNSense router itself, the traceroute and ping works as expected.

What am I missing here?