DNAT Rule not working / same configuration as other sophos XG

Hi all

i have a Sophos XG SFOS 18.5.2 MR-2-Build380

DNAT created via Wizard, checked everything with working DNAT rule on another Sophos XG. in the firewall log so far i could see that the DNAT rule was not triggered, it was always the default rule that was triggered. The new DNAT rule is above the default rule. Firewall let the traffic through...and Destination also seems to be correct, but i cant access the service...

I dont get it, how can i troubleshoot this...

thanks

Log
messageid="00001" log_type="Firewall" log_component="Firewall Rule" log_subtype="Allowed" status="Allow" con_duration="128" fw_rule_id="9" nat_rule_id="4" policy_type="1" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" vlan_id="" ether_type="Unknown (0x0000)" bridge_name="" bridge_display_name="" in_interface="Port2" in_display_interface="Port2" out_interface="Port1" out_display_interface="Port1" src_mac="64:00:F1:3E:A7:FF" dst_mac="80:EE:73:F4:E1:70" src_ip="a wan ip" src_country="BGR" dst_ip="internet ip of the XG" dst_country="CHE" protocol="TCP" src_port="46119" dst_port="7777" packets_sent="1" packets_received="0" bytes_sent="40" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="192.168.10.240" dst_trans_port="0" src_zone_type="WAN" src_zone="WAN" dst_zone_type="LAN" dst_zone="LAN" con_direction="" con_event="Stop" con_id="638422784" virt_con_id="" hb_status="No Heartbeat" message="" appresolvedby="Signature" app_is_cloud="0"