my answer was incomplete… this is the case when using the keyword MASQUARADE with iptable routing NAT, which is the default with ZS.
I don’t know how to do this from the web interface (not sure it’s even possible), but you have to use instead POSTROUTING.
I suggest you to search about this 2 different ways to do NAT to learn more about it.