Hello,
I am dealing with a similar issue but I am on fiber connection. Everything else is green, SIP ALG is disabled in the firewall and the SIP/RTP ports are forwarded to the 3CX properly.
It used to be green but I had to restore the 3CX yesterday from another installation, they are both on Debian, and now it would not pass.
The firewall shows nothing blocked during the tests.