XG210 - Access to FTP Server from Outside Works, Then Doesn't

Question

Moved over to the XG this weekend from a SonicWALL NSA4500. I'm in the office and connecting to my laptop via Teamviewer. I had a connection around 11AM this morning and announced to everyone that the FTP was back up. By 11:30 I had to announce that it was down again. Then around 1PM I was able to connect from my laptop again so I announced to everyone it was back up... Then it went down again. 
 As of right now I can connect from my laptop to the FileZilla Server but not the WS_FTP. Here's a screenshot of the Rules that I've created. Anything noticeably wrong that I'm doing?

sachingurung · Accepted Answer

I see many FTP rules configured, let's start with a cleanup. All the FW-rules that do not have any traffic displays 0B value on the bottom left, delete them! 
 Next, configure a new DNAT policy by referring to Sophos Firewall: How to DNAT to an internal server . Show me the picture of configuration if the rule doesn't work. 
 Cheers

sachingurung · Answer

Hi Patrick, 
 Is the FTP server hosted internally through a DNAT policy? When you see the drops, show me the system graphs from | Diagnostics | System Graphs. Next, is there an Anti-DoS configured which is dropping the packets. Check #1 in my troubleshooting guide and monitor the drop-packet-capture logs and when the FTP is down. 
 Thanks

Patrick Coy · Answer

Thanks Sachin, 
 It's nice to get all of that cleaned up! I worked on the Rules with a Sophos tech and we were able to determine the ultimate issue... The WAN IPs were still holding onto the MAC address from the old SonicWALL in the ISP's ARP Table. Once those propagated with the Sophos MAC address everything worked! 
 Patrick