Port Forward to Veeam Server in Zone failed

Hi All,

Currently the customer environment is using FortiGate as L3 device with multiple VLAN interface, Veem backup server (10.101.12.171) is connected to the VLAN interface production which group to Zone to minimize multi policy deployment.

We encounter an issue whereby the port forwarding failed to reach the server from external, we have verified that port and server are accessible from internal without any issue. Appreciate if anyone can guide me or verified below policy for port forward with zone are correct. Thanks