When you have the UTM behind another firewall and want to use the RED technology, you will have to NAT the following ports through the perimeter firewall:
Note: it has been seen several times that some ISP’s block the traffic of UDP 3410 due to it’s triggering of Intrusion Prevention Systems, so be aware of that, if things are not working in the beginning, then contact your ISP.