Its not very clear I agree, I get the same from my test system and I know it is definitely firewall related (because ive not configured the firewall).
Look at disabling SIP ALG in your router/firewall and also check you have a one to one NAT mapping setup for 3CX's public to private IP addresses (some firewalls call it one to one NAT mapping).