Problem with DNAT SFOS 17.0.3 MR-3

Hello, 

   I have a problem with a DNAT rule on one XG115W (SFOS 17.0.3 MR-3)

I create the forward rule for access to RDP server:

But when a try to connect i see this on log:

2018-01-04 14:44:49 0103021 IP 1.52.69.182.16739 > 213.149.204.218.3389 : proto TCP: S 2406000322:2406000322(0) win 65535 checksum : 263
0x0000: 4548 0034 2518 4000 2e06 3e0a 0134 45b6 EH.4%.@...>..4E.
0x0010: d595 ccda 4163 0d3d 8f68 a6c2 0000 0000 ....Ac.=.h......
0x0020: 8002 ffff 0107 0000 0204 05a0 0103 0300 ................
0x0030: 0101 0402 ....
Date=2018-01-04 Time=14:44:49 log_id=0103021 log_type=Firewall log_component=Local_ACLs log_subtype=Denied log_status=N/A log_priority=Alert duration=N/A in_dev=Port2 out_dev= inzone_id=2 outzone_id=4 source_mac=e4:8d:8c:f2:23:90 dest_mac=00:1a:8c:45:99:31 l3_protocol=IP source_ip=1.52.69.182 dest_ip=213.149.204.218 l4_protocol=TCP source_port=16739 dest_port=3389 fw_rule_id=0 policytype=0 live_userid=0 userid=0 user_gp=0 ips_id=0 sslvpn_id=0 web_filter_id=0 hotspot_id=0 hotspotuser_id=0 hb_src=0 hb_dst=0 dnat_done=0 proxy_flags=0 icap_id=0 app_filter_id=0 app_category_id=0 app_id=0 category_id=0 bandwidth_id=0 up_classid=0 dn_classid=0 source_nat_id=0 cluster_node=0 inmark=0x8001 nfqueue=0 scanflags=0 gateway_offset=0 max_session_bytes=0 drop_fix=0 ctflags=0 connid=519801696 masterid=0 status=256 state=1 sent_pkts=N/A recv_pkts=N/A sent_bytes=N/A recv_bytes=N/A tran_src_ip=N/A tran_src_port=N/A tran_dst_ip=N/A tran_dst_port=N/A

My rule is #1 on firewall rules.

I create a rule like this in about 30xg but only in this on it doesn't work.

Have any idea?

Thanks a lot

Matteo