In your host definition for the device, change the interface back to the default of Any. Binding to a specific interface is generally considered bad and will block traffic that you want to allow, due to the way the setting works.
Also, make certain that you are testing the DNAT from a host out on the internet and not from your LAN.
PS, If you select Automatic firewall rule you do not need to create the firewall rule and no you will not see it in the firewall rule section but the firewall will pass the trafic
jzkkn5, I would use "Internet" instead of "Any" just for clarity as a DNAT doesn't work from devices on the LAN. Also, per #5 in Rulz, I would leave the 'And the service to:' field blank.
The DNAT rule is working. I started from scratch, wipe the box.
1 - Web Protection - Filtering Options - Added a Allowed target service
- Called TCP 8000
2 - Network Protection - NAT - NAT - DNAT
- Condition
- Traffic from Any
- Using Service TCP 8000
- Going to Ext WAN
- Action
- Destination - created network definition NAS DVR- Host IP address 192.168.0.50
- Service to - TCP 8000
- Auto Firewall Rule
- Enable Rule