I have been running into the same problem, and I finally solved it by separating the object-groups used for NAT from the ones used elsewhere.  So now I have 2 separate objects and groups:!-- Define each network objectobject network internal1-network ...