Issue with device access through the WAN interface

Good day all,

     Is it a known issue after migration from cyberoam to  SFOS where one cannot access the device through the WAN link, because i have not been able to achieve that. What can i do in this case to have it working? Also i notice that SSO clients disconnect when they go on sleep mode thereby prompting re-authentication. I expected that that should not be the case since they are SSO clients. Is there a way to resolve this. Thanks