Hi
Static NAT does not translate ports - this is by desing. So you can not match on port because
all ports will be passed untranslated, only ip is translated in both directions for static nat.
This does not depend on version.
But in corresponding security policies, you can filter on ports to allow only some of them
to pass to your internal network. Still, use destination nat if you need to translate ports.