WAN interface down (but working) - SSLVPN no Remote Lan Access

Hi,

i´ve two problems with my new Sophos XG125 FW. I hope you can help.

First my Configuration:
1. Zyxel VMG 1312 acting as Modem on a Telekom VDSL Connection (Bridged Setting with VLAN7 enabled)

2. Sophos XG125 (SFOS 16.01.2) acting as Gateway:

- Port2 Wan Configuration (PPOE works without VLAN7 configuration),

- Port5 is LAN --> 192.168.1.9

- SSLVPN according to this steps https://community.sophos.com/products/xg-firewall/f/vpn/10975/ssl-vpn-policy --> 10.81.xx.xx

3. Fritzbox (7330) acting as Router/DHCP --> 192.168.1.1

First Problem:

Access from 192.168.1.x -> 192.168.1.x is possible.

Access from 10.81.xx.xx -> 192.168.1.x is NOT possible except 192.168.1.9 and 192.168.1.1 (Firewall Rule SOURCE (ZONE: VPN, NETWORKS/SERVICES: ANY) --> TARGET: (ZONE: LAN, NETWORKS/SERVICES: ANY)

Do i forgot any settings/routing? Any ideas?

-> Solved: Norton EP Firewall blocked on client side.

Second Problem:

The WAN Port is always displayed as DOWN everywhere in the GUI, but it is up and running and have access to the WAN/Internet from LAN Subnet. Why is it not displayed as UP?