Problem with webserver protection

Question

Hi, 
 Have an Sophos UTM 110/120. 
 Have gone after these link: http://fastvue.co/sophos/blog/how-to-publish-websites-with-sophos-utm-web-server-protection/ 
 I changde to my info. 
 Everything works good but when try my website coming an blue color, have an script in index.htm goes to wordpress, nothing happen after that blue color. 
 Have done rule firewall to my webserver out and in too. Then doing an DNAT rule 
 DNAT rule going after these link http://www.virtualizationhowto.com/2015/02/configure-port-forwarding-sophos-utm/#prettyPhoto 
 port is open to 
 I think something is wrong on my webserver , for write in my webbrowser typ www.xxxxxx.se then coming blue color after that is wordpress coming but nothing happen for me. 
 have www before my domain name but after blue color is not longer www. 
 Before Sophos UTM working good have another firewall device then was no problem. 
 I seeking on Internet of course. 
 Thinking to do new installation on my webserver for see if that helps but not give up yet. 
 Hope understand my english not easy to write think

Evianne · Accepted Answer

Hi, 
 
 the log lines with scrip 127.0.0.1 are 'normal'. That's for checking the status of the real webservers. 
 
 If you have a DNAT rule, the traffic bypasses the WAF. Disable the DNAT rule and afterwards check the logs when you make a request. 
 
 Sabine

BAlfson · Answer

It's good to be cognizant of the fact that WebAdmin is a GUI that manipulates databases of objects and settings. The actual lines of code that perform the functions are written by the configuration daemon. After you make a change in WebAdmin, the configuration daemon might change hundreds of lines of code. #2 in Rulz gives an idea of the sequence of the lines of code written by the config daemon. 
 Cheers - Bob