In your host definition for the device, change the interface back to the default of Any. Binding to a specific interface is generally considered bad and will block traffic that you want to allow, due to the way the setting works.
Also, make certain that you are testing the DNAT from a host out on the internet and not from your LAN.
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
PS, If you select Automatic firewall rule you do not need to create the firewall rule and no you will not see it in the firewall rule section but the firewall will pass the trafic
jzkkn5, I would use "Internet" instead of "Any" just for clarity as a DNAT doesn't work from devices on the LAN. Also, per #5 in Rulz, I would leave the 'And the service to:' field blank.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
The DNAT rule is working. I started from scratch, wipe the box.
1 - Web Protection - Filtering Options - Added a Allowed target service
- Called TCP 8000
2 - Network Protection - NAT - NAT - DNAT
- Condition
- Traffic from Any
- Using Service TCP 8000
- Going to Ext WAN
- Action
- Destination - created network definition NAS DVR- Host IP address 192.168.0.50
- Service to - TCP 8000
- Auto Firewall Rule
- Enable Rule