if I forward a machine in LAN it can be accessed from WAN. But when I forward a machine in DMZ the firewall

Hi,

My Sophos UTM got 3 interfaces WAN, LAN and DMZ. WAN and LAN was automatically configured at the time of installation. Later I configured DMZ. if I forward a machine in LAN it can be accessed from WAN. But when I forward a machine in DMZ the firewall gives rule=60001 action=drop.

What I actually want is

firewall_ip->2002->DMZ_ip->80

I created both network and service definitions. DNAT was created with these definitions