If I understand your layout correctly you have successfully setup nat and policy from internet sources to your public ip address nat to an internal server. But access to the same public ip address to those servers from internal addresses does not work.
For the internal traffic to work you need two policies nat and security.
For the nat policy you likely can simply add the internal zone or zones as the source zone to the working