advanced security allow access

Hi, I have a UPnP device that I would like to allow access to from outside networks. The documentation here: https://internet.xfinity.com/more/help/articles/Frequently-Asked-Questions#xfi-advanced-security states: 

Can I use Advanced Security while having port forwarding or DMZ enabled?

If Advanced Security detects a known threat targeted for the device with Port Forwarding, DMZ settings enabled, or UPnP open ports, it will block all traffic coming from its open ports as a measure of protection until the threat is averted. If you are unable to access a device from outside your home network, you have two options:

1. Allow Access – Go to the Connect section in the Xfinity app or xFi website, select Advanced Security and then select the device you want to provide access to. Follow the instructions to Allow Access. We recommend that you only use Allow Access when you are confident about who is accessing the device from outside the home network. Note that the Allow Access feature will only permit access to the specific device you choose on the specified port using a specific source IP address for 30 days from the time you enable it.

However, there are no devices listed when I go to Connect->Advanced Security. The device in question is, however, listed along with all my other network hosts from the main Connect tab. This is annoying as I like the idea of having the Advanced security turned on but I must have UPnP working from this device so it can open ports when needed. Also, adding port forwarding rules via Connect seems to be out of the question since this host has a static IP far outside of my configured DHCP pool and frankly would be too much work to change even if I wanted to use static DHCP. Since, it seems, you cannot add port forwarding rules for hosts that DO NOT use DHCP. I don't understand why this limitation is in place. 

thanks