Can't access internal Server in DMZ from LAN using the external Address

Hi and thanks for reaching out to Sophos Community.

Try adding LAN as a source zone into your Firewall as the traffic is getting generated from the LAN Zone.

If it still doesn't work, then try adding MASQ in SNAT section in your DNAT rule #1 and see if that works or not. 

Hi DeveshM, 

thanks for your answer.

I already added this rule but its not working with the external IP.

I just can use the internal IP to connect to my service.

I also tried setting my NAT Rule #1 in SNAT to MASQ.

But still no success.

Hi xXTim150Xx,

I'd suggest you try to add the LAN zone in addition to the WAN zone on the DNAT rule as well as in the matching firewall rule, and let us know if that resolves your issue. 

Thanks,

Thank you H_Patel.

I created a linked NAT-Rule to my Firewall Rule #2. This one solved my problem

Thank you H_Patel.

I created a linked NAT-Rule to my Firewall Rule #2. This one solved my problem

Hi xXTim150Xx,

Thank you for taking the time to update the Community! I'm glad that your issue has been resolved.

Thanks,