Allow SFTP: id proto from LAN to WAN

Hi all,

XG Firewall

I just need to know about allowing SFTP traffic from LAN to WAN

Group of users need to upload files on SFTP Server partner  located on WAN (WEB)

The server SFTP  is already configured and my public IP is allowed to access this server.

I have all informations it, ip address, Port nuber of SFTP, username and password..

i think is just to make firewall rule:

Source Zone=LAN

Networks Source=Any

Destination Zone= WAN

Networks Destination= public IP Server ( Or Any)

Services= SFTP: Port number

For selectionned Users ( authentication in place)

Then make SNAT rule for this traffic

did i forget other parameters, or is it already enough to load files ?

Thanks