Config for GUI should work. From remote host, there's no redirect from port 80, so you have to type entire URL yourself:
https://<ER-WAN-IP>:8443
GUI is only TCP, so specifying TCP instead of TCP_UDP should work too
Also, your RDP rules in WAN_LOCAL are useless. They should be in WAN_IN.......but auto-firewall enable on portmaps already have opened up access globally
