Purview Synapse Workspace Connection denied

Ideally the Deny Public Network Access setting is always enabled based on the documentation you have linked above. Possible cause is that the connection attempt is being made over a public network.
Use the second documentation to set up a private endpoint and follow the wizard  guides. Double check your DNS configuration as well to resolve the private endpoint.