Struggling a bit with WAN to LAN access

Question

I have just installed UTM 9 on my home network. 
 
 Interfaces configured as below 
 
 I have configured NAT Masq as below 
 
 From my "Internal" network I have no problems accessing machines on the internal network, or on the "Internet" interface ( even hosts on the internet as the G/W for my "Internet" interface is my cable modem). 
 
 From my "Internet" network I am unable to access any host on the "Internal" network. 
 I have created an open rule as below - but I still can't access by "Internal" hosts from the "Internet" network

Any ideas on why I might be missing? 
 
 David

apijnappels · Answer

First things first: 
 As already mentioned above, what you want to accomplish is perfectly possible with just the Sophos UTM (and maybe also with just pfSense but I don't know pfSense myself). So investing in this setup is not the best thing you can do. 
 However, I think you can still do what you want.... 
 
 I assume this is your current setup: 
 Internet ==> Router ==> Sophos UTM ===> pfSense 
 Your outbound systems are in between UTM and pfSense and behind pfSense are some services that need to be reachable from outside? 
 
 As I understand from Balfson's post, your Sophos UTM is already behind a NAT router so that router should have a DMZ or exposed host setting pointing to the UTM for anything to get to the UTM in the first place. 
 You will also want your UTM to forward all "incoming" traffic from it's WAN side to pfSense. You can make a DNAT rule on the UTM: 
 Traffic from: Internet IPv4 (or any) Using service: any (better is to create a group containing just the ports that really need to be forwarded) Going to: External (WAN Address) 
 Change destiniation to: WAN address of pfSense box And the service to: <leave empty> 
 Tick the box "automatic firewall rule" and you should be good to go. 
 
 Again you'd better invest your time in creating the environment you want using just one product, either Sophos or pfSense. Maintaining multiple devices is error prone, more work and solving problems is also a lot harder than when you just use only one product.