“Make sure the firewall is not blocking requests”… Cloudflare, you ARE the firewall:
Turning off Bot Fight Mode “resolves” the issue and allows the scan to complete but that’s no good if you want to set up scheduled scans.
I can tell this is actually just reskinned Google Lighthouse, and the connections are actually coming from Google IPs, but if this is being positioned as an official Cloudflare product, why can Cloudflare not allowlist the relevant IPs?