Virtual wire pair cannot access to other port

Site B is accessing internet through MPLS, the MPLS is directly to the switch without any control, I'm now would like to use a Forti 100D or 200E to do policy control, but after virtual wire pair set, it cannot access to internet.

the virtual wire pair is set to open all service and all source but still cannot go to 170.10.1.13.

I'm also try to use software switch, but after grouped port 3 and port 4, it cannot control by policy and just working like a switch.

Any wrong setting on the virtual wire pair?  please help...  Many thanks

Original Setting

After below setting, it cannot access to 170.10.1.13