To add to this, I’ve now inspected the SIP logs:
SIP initiates correctly to the WAN address of the first firewall.
RTP packets are sent to the local IP of the PBX hence this is why there is no audio.
The question now is why the softphone is trying to send audio to the PBX local IP and not the WAN IP?