Unable to access admin console from WAN

Question

Hi All, 
 
 We just deployed Sophos XG as VM and I start to create all my rules. 
 I am not able to access my Admin console from WAN, I can access User portal on 4443 port but no admin access. 
 I already checked the HTTPS on Admin Services. 
 When I telnet 4444, the port is not open. 
 Is there any additional step that i need to do ? 
 
 Thank you for your help.

LuCar Toni · Answer

Basically, you need to turn on HTTPs on Device Access page. 
 This will enable the zone Destination based ACL. 
 https://community.sophos.com/kb/en-us/132814 
 Maybe this KBA helps? 
 
 You could try to tcpdump in the first place, to see, if there are any packets coming Port 4444. This would indicate a XG or NAT issue. 
 https://community.sophos.com/products/community-chat/f/knowledge-base-article-suggestions/105811/how-to-tcpdump-on-xg