Ic2 Push Config behind NAT Router doesn't work

Hi,

I have a problem with pushing outbound policy and firewall rules via Ic2.
my device is MAX HD2. If the device is directly connected to the internet, the config is pushed smoothly.
but if the device behind my NAT router (only open for port UDP 5246, TCP 443), the config from IC2 won’t push.

the device appears online in ic2, but I can’t push the config.

Add TCP 5246 and test again.

actually, I’ve already opened any. and the result is still the same.