Getting the heartbeat to work - not as easy peasy?

Question

I've registered my sophos xg - and I am now trying to register the heartbeat function without luck - I am getting the error as follows : 
 
 there is a Sophos UTM box between this XG and the internet - but I've ensured that all traffic from the WAN interface on the XG is allowed. - and I SEE the traffic on the UTM (443) pointing to the AWS services hosting cloud.sophos.com

Kjetil Marthinsen · Accepted Answer

I have for two days been unable to make this work, and I was positive that I had tried the any <> any rule already - but re-adding it - and ticking masq together with an any any rule on the UTM in front of it worked, and I am now connected. As I have been in contact both with a partner and sophos on twitter and here - I am unsure if you have done anything - or if its all me :) But now it works - and you don't need the UTM in bridge mode for this to get setup.