even though i have the internal IP range in intranet list the firewall is showing up as an external host.

This means that the 10Mb+ logging/lea traffic is showing up on reports as external data..

 

How can i get the software to count it as intranet or ignore it all together..

Also in the raw logs under hot.. I notice FW1_lea traffic appears with __p_dport="Unknown", which I assume is why the traffic all appears as unassigned/unknown even though I have put the ports into the assignments.