Client ( 10.25.20.0/24)
Access RouterA --->AGG Sw1---->JFW----DMZ
172.20.36.36 is NATd with 18.104.22.168 in the FW, client is using the NAT IP to reach Srv1.
Looks like traffic is not hitting the FW at all. I can see trace from client reach up to RouterX and 3.3.3.x network is hostedon RoutrA.
Any help would be great.!!!!