Thank you for your proposal. If there should be a rule then the connection from VPN2 to FW-INT would be permanently blocked and not after 4 minutes. I did not establish any rule in any of the listed VMs. I checked out FW-INT - settings - Firewall and there are no rules.