Who is your host? If they use Cloudflare, then make sure to also use the CNAME for the apex domain DNS record instead of an A record so requests pass through your account first.
Otherwise, can you show a screenshot of your WAF rule.
GHL use Cloudflare for SaaS so as I mentioned above, you need to use only the proxied CNAME they give you for any records that point to them, including the apex domain record.
Do not use A or AAAA records otherwise the request will go direct to GHL’s Cloudflare account and not pass through yours, so your rule won’t take effect.
I have tried organizing A record With CNAME record by many way but fails.
Can you please guide me to set that new CNAME record after delete the current A record?