I'm testing this setup to deal with one of our more secure servers, and I think I'm running into this problem.
Consider this 2 node cluster:
Cluster IP - xxx.xxx.xxx.1 (cls1)
SQL Virtual IP - xxx.xxx.xxx.2 (cls1sql1)
Node1 - xxx.xxx.xxx.3 (cls1node1)
Node2 - xxx.xxx.xxx.4 (cls1node2)
Now if the firewall rules say that only cls1sql1 has 1433 open, does that mean that even though SQL Monitor figures out that cls1 is the name of the server, will it also know to use cls1sql1 to connect to the sql instance?