Routing from WAN to LAN - Some help needed

Question

Hello everybody, 
 I need some help here. I recently migrated from pfSense to Sophos XG home and I really like it, but I have some trouble getting my routing configured. 
 Basically I want to configure remote access to my media servers. What I did is: 
 
 Port forwarding from my provider's modem/router to Sophos (which worked before so that ok) 
 Created a policy to allow the traffic 
 Routed the traffic to the IP (in many different possibilities by now) 
 
 But its not working. In the logs I see denied traffic but its from a different source IP. I'm sure is a misconfiguration but I don't see where.

Ronak Sheth · Accepted Answer

Hello Jimmy Le man , 
 
 That is fine to have a private IP on the WAN interface. Your business rule is incorrect.

Go to Host and Service > Service and add a service with source port "1:65535" and destination port "1994" "35665" " 35666" and "35661" 
 Go to Firewall and create a business rule as following
 
 Source Zone: WAN / LAN 
 Allowed Client Network: Any 
 Destination Port: #Port2-192.168.0.107 from the dropdown 
 Service: Select the above service 
 Protected Server: Server to which you want to forward your traffic 
 protected Zone: LAN 
 Change Destination Port: disable 
 Rewrite source address (Masquerading): disable, if not working enable it.

Good Luck!!! 
 Regards, Ronak.

Ronak Sheth · Answer

Hello Jimmy Le man 
 
 If you want to forward traffic coming on WAN interface to your LAN system you need to create Business rule and note a Usee/Network Rule. 
 
 Kindly refer How to DNAT to internal server 
 
 Cheers, Good Luck!!! 
 Regards,Ronak.