If you made manual changes directly to the /etc/network/interfaces file, you can apply them by running ifreload -a
from the docs : https://pve.proxmox.com/wiki/Network_Configuration
1/ Firewall is not related as iptables PREROUTING bypass firewall.
2/ open 3389 publicly is not recommended as bots will try thousands credentials per seconds.
you hit this bug :
(workaround is direct upload with scp / winscp)
Post in thread 'Proxmox VE 9.0 ISO Upload Corrupts Some Windows Server 2025 ISOs' https://forum.proxmox.com/threads/proxmox-ve-9-0-iso-upload-corrupts-some-windows-server-2025-isos.169531/post-806405
Use RTM iso, as Windows updates itself monthly, it makes no difference.
( I don't see anymore the point of refreshed media, as each month, it'll outdated)
if these are Samsung QVO, they are not suitable at all.
QLC drives write very slow after cache (which is different from DRAM cache).
There is plenty topics on the forum about it, mainly with ZFS because it reveals faster the slowness.