publish web site

HiTarekHalloun: Please check the below Recommended Reads on DNAT configuration:

Section "WAN-to-DMZ traffic" will be helpful in terms of configuration parameters check according to your XG settings.

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121919/how-to-configure-firewall-rule-and-nat-rule-on-sophos-xg-v18

Sophos Firewall: DNAT/Port forward to an internal server

support.sophos.com/.../KB-000035604

i was able to access the website from the internet but i cannot access it locally from internal subnet on the same XG ( can be accessed with local ip but not the public ip ) even though i have a loopback nat

Hi TarekHalloun: Yes to access or publish an in-house website DNAT rule is getting used. Here in the above configuration service port and IP details, you may change according to your setup and requirement and that should work.

In case it is not working after DNAT (Firewall and NAT rule) rule configuration you may check the TCPDUMP, Drop to see how the packets are getting proceed and any drop is therefore not for the outside IP request over DNAT.

Hi TarekHalloun: Yes to access or publish an in-house website DNAT rule is getting used. Here in the above configuration service port and IP details, you may change according to your setup and requirement and that should work.

In case it is not working after DNAT (Firewall and NAT rule) rule configuration you may check the TCPDUMP, Drop to see how the packets are getting proceed and any drop is therefore not for the outside IP request over DNAT.

my issue now is to access it locally with the public ip

ok adding lan to the source worked 

Hi TarekHalloun yes you may tweak or add the source zone as per requirements.