Configure a DNAT to remap the traffic of an interface IP (192.168.1.254, aka floating IP) accessing the firewall from the Internet to the traffic of a particular machine (192.168.2.200) in the LAN.
Floating IP always on active firewall
After HA failover