Cant access exchange OWA

Hi,

I got a sophos xg 17 with a exchange server on a local IP-adress that I want to acces from the WAN. But with the exchange general rule I cant access it from the WAN or the LAN. I just get a sophos login prompt:

I can send mail and receive mail, sophos is configured as a proxy for SMTP, here´s the configuration that I got:

And here is the exchange general rule that I think is the problem:

The eschange general rule also complains about the autodiscovery.

The webserver has these settings:

And the settings for HTTPS decryption:

The boxes are usaly "on".

With those settings I cant access the website (OWA) for the eschange server on the LAN or WAN. But when I add a dnat rule it works. But what I have read about how to configure sophos with exchange I should not need to have a portforward rule and that the portforward rule makes sophos not protect the server. But here is the portforward rule and the order of the rules:

I cant figure out what the problem is and the guides are not that descriptive.

Everything is setup in a labenvironment so trying so IP-adresses can be somewhat weird, like the WAN is realy a localadress.

Would like all the tips I can get to get this working, and if there are some rules that I can remove or need to add.