Cant access webservers behind sophos bridge from outside

Question

Hi, 
 
 We have recently implemented sophos UTM 9 as a bridge between our internal LAN and our ISPs router. Our ISP has a hosted firewall and our static IPs are natted from public to private IP address in the hosted firewall. 
 
 Sophos is up and running and all traffic flows with the exception of anything going to our webservers from outside the LAN. 
 
 I am having trouble discovering why sophos is blocking this traffic after having turned off intrusion protection and web filtering, and applying an ANY > ANY > ANY rule at the top of the firewall rules list. Additionally, when trying to reach the webserver from outside the LAN, I see nothing in the live log in the firewall. 
 Hope this is enough info to get a high level understanding of what we have. 
 
 Thanks, 
 
 -dale

Dale Mathis · Answer

So I finally sorted all of this out. 
 It turns out that our ISP's managed firewall that sits in front of my Sophos UTM was not configured correctly. I have recently learned that when I call and ask them to setup NAT rules, they have a management device they configure. They then push the configs to our hosted firewall. 
 
 When I call in to verify the configs, they only look at the mgmt device. In this case they configured the mgmt device, but did not push the configs to our hosted firewall, therefore the traffic was not natting, and was not being delivered to Sophos UTM. 
 
 After this config was pushed, a simple firewall policy was all the was needed in the UTM to allow the traffic. 
 
 Hope this info helps someone to think outside the box. 
 Thanks Bob, for your reply. 
 
 Regards, 
 
 -dale