configuring sophos utm 9 to allow access to applications published in microsoft remote desktop services

i have an issue in my sophos utm 9.7 configuration first of all i added the local certificate for RDWeb site then i cofigured virtual webserver and real webserver ,when i started to test ,no good news and i tried many things like fullnat in network protection, it worked but i suspected it is bad for security then i undo, till i got to firewall profiles in webserver protection and i found Microsoft RD Web 2008 profile with "reject"mode ,i changed mode to monitor then it worked for a while then it didn't work and still can open the url but applications no