The traffic is dropped by the Default_Access_Rule which means that the source network isnt routed on the lan interface. Set Section Rules/Access to allow the dropped network xxx.xxx.x.x/24 so the system will accept it as a sender address.