3CX Firewall Check failed on Sophos XG210

I am having an on-prim 3CX Server for the same the Firewall Check is failing as under:

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX PhoneSystem 01 SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... not detected
  • testing port 5060... full cone test failed (How to resolve?)
  • starting service... done
• testing 3CX PhoneSystem Media Server... canceled
  • stopping service... done
  • testing port 5090... full cone test failed (How to resolve?)
  • testing ports [9000..9398]... canceled
    • testing port 9000... canceled
    • testing port 9002... canceled
    • testing port 9004... canceled
    • testing port 9006... canceled

We have configured the firewall with following rules:

And Another rule as under:

Kindly suggest how to rectify.