Does the cable modem have an IP of its own? Or is it working in bridge mode, thus only the ZS interface has an IP from your provider?
What is the firewall blocking? Could you show us a screenshot?
Also, where is the PC that you are doing the troubleshooting? Inside your LAN or outside?