Alright, so I was in contact with fluent and they are not using a custom user agent.
I tried allow listing:
URL: /wp-json/fluent-crm/v2/subscribers/0
PARAM: request.queryString[get_by_email]
but still no luck. On Live Traffic, I am not seeing any traces of this, but still when I disable the firewall, the request works.