By default when installing CSF (ConfigServer Security & Firewall) testing mode should be set to On to ensure that connectivity isn’t blocked until the firewall is setup properly.
Consideration should also be made to add Cloudflare Tunnel port for outbound access