Confused

Question

I am trying to allow the CEO to access his personal email from outside the network. It is being blocked at the sophos UTP. 
 He has an imap service with a hosted provider. 
 We have simple smtp enabled. 
 and being forwarded to our exchange server which works great. We have mail spam and quarantine which works perfectly. 
 
 I have added the domain to the upstream host

I have added an Snat entry that enables the ceo's pc (in reality all the pcs ) to send and recieve to this domain. 
 
 I am not sure what i have setup wrong. I just need 3 pc's to be able to access this domain on port 143 and 587. What do i have configured wrong ? 
 
 Pulling my hair out here

Ol Deda · Answer

1) You dont have to put CEO personal email in Upstream hosts/networks 
 2) Since the Email Protection is in transparent mode: UTM is the property of Email Protection and you cant do nothing with Firewall or SNAT Rules. You have to Exclude the CEO ip Under: Advanced > Skip Transparent Mode Hosts/Nets. Then you can play with Firewall Rules

apijnappels · Answer

Shaun Raven said: 
 If Louis-M is correct in his assumptions, I don't think you need the SNAT rules - a simple firewall rule allowing access from your CEO's PC to the required mailserver using the "Email Messaging" protocol definition should suffice. 
 
 Shaun's advice looks correct to me: 
 
 Get rid of the SNAT rules (I bet they are the culprit of things not working now). 
 Your firewall rule 9 is useless since in rule 8 you simply allow any (rule 9 will never be triggered this way), however I would disable rule 8 (with any) and use rule 9 instead. Make sure all required protocols are in the rule (IMAP, SMTP,