Forward external IP to specific internal IP

If you are going from internet to internal you need a NAT, this rule won't apply to any traffic since internet traffic will not arrive to your firewall with the destination IP as the internal. 

Make a NAT which forwards all traffic from those two IP's to the internal host. 

ok this is what I have so far

The rule is configured incorrectly so far. 

• The vendors public IP's should be in the 'Allowed client networks'.
• The Destination host should be the WAN port. 
• The forward to 'protected servers' should be the IP that the vendor needs to connect to. 

thanks for the help. I have updated it (removed the rest of the public IP from the pic from the WAN port 2)

oops forgot to set the protected back to the PC On the lan

This should work barring any unforeseen circumstances. 

The company is connecting on port 1223 - which shows in the logs it is allowed through and forwarded to the appropriate PC on the lan. So the firewall is letting it through but then it dies because the software on the PC is listening on port 80. I couldn't figure out how to change the mapped port from 1223 to 80 and then I saw this screenshot of someone else trying the same thing and I noticed a checkbox "Change Destination Port(s)" which is missing from my dashboard. Also all of my subnet masks for everything shows 255.255.255.255 which is a different from when I set it up, so something is wonky. I am updating the firmware now and hoping this checkbox appears.

The company is connecting on port 1223 - which shows in the logs it is allowed through and forwarded to the appropriate PC on the lan. So the firewall is letting it through but then it dies because the software on the PC is listening on port 80. I couldn't figure out how to change the mapped port from 1223 to 80 and then I saw this screenshot of someone else trying the same thing and I noticed a checkbox "Change Destination Port(s)" which is missing from my dashboard. Also all of my subnet masks for everything shows 255.255.255.255 which is a different from when I set it up, so something is wonky. I am updating the firmware now and hoping this checkbox appears.