All of my NATs are currently Static and Dynamic. I have a host on my
private network that has is assigned to a public secondary ip address.
Traffic inbound from the internet to the virtual IP reaches the internal
host. However, outbound traffic from the host to the internet is not NATd
back to the secondary IP address. Instead, it leaves with the firewall
primary IP address. I do have a lot of hosts behind the firewall that need
to be 'masqueraded' to use a Linux term. But I need this one host to be
completely plumbed to the outside virtual IP address.

What am I missing?