STUN problem?

I am running Firewalla Gold in router mode with a unfi controller running in docker on my Synology on my LAN. I am seeing the following error which points to this page to explain unifi's use of STUN.

My unfi is not connected to Ui's remote management cloud solution so I don't know why I would need to open ports. I don't see how Firewalla is blocking anything here but I'd love to be able to rule that out. Is anyone running unfi that has seen this or knows how to solve it?