internal Network can't reach Public IP

Do you configure masquerading, so your private IP's not used at the internet.

Yes. Shoud I disable it?

no, you need masquerading to reach the internet while using private IP at the client.

seems your FW rule 19 isn't correct.

Must be:  internal LAN -> any -> Internet

Thanks for you replies

Here are my Interface and NAT Config

Ok so edit rule 19, make the source your internal network, the services any or whatever specific ports you want i.e. ports 80 & 443 for web browsing, them make the destination your wan.

You can do this by clicking on rule 19 edit, deleting the three you have set for source, services & destination.  Then click on the folder in the source part, and go to the search bard on the left, type LAN to find your internal LAN, you can drag and drop it into the source part.  Do the same for services with Any and the same for destination with WAN.

See pic

Also in order for us to see NAT you need to take another screen shot, it is under Network Protection --> NAT

It is right under the firewall menu option.

Also in order for us to see NAT you need to take another screen shot, it is under Network Protection --> NAT

It is right under the firewall menu option.