DNAT is not working for Public IP aliases

I do not think, this will help.

You should see the traffic incoming in a Dump.

As mentioned earlier, this is the lowest level of communication. 

If you do not see the traffic hitting on those criteria, there is something wrong in the configuration between XG and your ISP. 

If you perform a tcpdump -ni any host IP  you should at least see something. 

If not, the traffic is not hitting XG.

Even if you did a mistake in the interface configuration, something should be seen in this Dump. 

Another issue could be the ARP Communication, but i would suggest to dig deeper in this scenario explained above. 

I would look into the ARP Communication as well, I had a similar issue with my deployment where the modem and actually the switches internally did not clear out the MAC address of the old firewall, so the IP's matched up but didn't get through the modem due to the MAC address, once I figured that out I had the same issue with the switches.

Might not be same case here but figured I would share just in case.

Thank you for your reply Badrobot. Its a fresh installation the ARP is clean.

Hi Toni,

I had to configure another WAN with another gateway on port4 to take the server up and its working fine perfectly.

All the NAT is not working even when setting a port forwarding rule, except its configured on another port of which are limited to 4 - LAN

I'm really disappointed with this firewall and how xg has turned to.

I am still not sure, if this is a issue with XG at all. 

Would assume it is a issue between ISP and Your WAN Connection. 

How should a product (and i am talking about product, not XG in this case), forward a packet, which is not there at all? 

I would suggest to call the support to get a debugging. 

That's the point! It worked fine with Cyberoam, TP-Link Router, Pfsense Box, Cisco Router. if with all of those devices it worked why should it be ISP to WAN issue!?

In addition, as I said before the Aliases are the problem they are not being recognized not even receiving a handshake.

All in all, Thank you for your time and support I appricate it, I'll take the issue to ISP/XG dealer to see it through.

Regards,

But even the Interface is not getting any Packets for this IP. 

So more the less XG is not sending out the correct ARP, which is easily shown in a dump. Or the ISP is not considering your Interface as the correct interface.

Both cases would be possible to debug. 

https://www.thegeekstuff.com/2010/08/tcpdump-command-examples

 The modem is brand new as well?  Or just the XG?

As you predicted its the ISP

They changed IP configuration from their side.

Thank you for support.

NSG was not the problem it was from ISP IP configuration

Thank you for all the help