Teams direct routing with Azure SBC call failure

We have deployed an Azure AudioCodes SBC for use with direct routing.  We randomly get failed outbound calls, or calls with one way audio.  Question is, does the Azure Load Balancer need NAT rules? Or does having them in the firewall as well as the SBC all we need?  We have talked to both Microsoft and AudioCodes support, they both point the finger at each other.