Internal Webserver has no route to WAN

Could you show us the entire stream? 

So you should see an incoming packet, which got translated. 

Because right now, we only see the outgoing packet. 

And show us the firewall rule, you are using for this DNAT: It should be reflected in the packet capture as well. 

Sure, this is the incoming package:

Firewall rule ID 10:

Can you show us the screenshot of the packet capture of the entire connection? 

Please do a dumb with a OR and the internal Host as well. Or do only the service. Because there is the internal part missing. 

Oh sorry, here is the result:

What do you mean with "internal Host as well"? 
192.168.169.103 is the webserver, 169.1 is the XGS and 210.117 is the WAN interface to our router

The Webserver is dropping your Connection. So it seems to be a Application error. You see the SYN and it gets dropped by the Webserver with Reset. 

Please go to option 4 on console from SSH access and check connectivity 

console>ping 192.168.169.103 

console>telnet 192.168.169.103 4443

on another putty, session start tcpdump 

console>tcpdump 'host  192.168.169.103 and port 4443

Share the output if ping and telnet are working

Regards

Ping did work, telnet on port 4443 did not, telnet on 80 worked, so i guess this is an application error.

From previous threads on this subject WAF does not handle 4443.

ian

From previous threads on this subject WAF does not handle 4443.

ian