Since you have already created a firewall rule, it seems like your network configuration is already set-up properly. To be able to connect to your external IPs over specific ports and allow ingress ssh connections to your VMs, you might just need to double check on the following:
Ensure that the firewall rule is applied to your VM instances by selecting Targets > “Specified target tags”, then enter the name of the (network) tag into the “Target tags” field.
For ingress rule and egress rule, set Source Filter(inbound) and Destination Filter(outbound) to use 0.0.0.0/0 to allow traffic from and to any network.
To allow incoming TCP connections to ports 1443 and 8090, in "Protocols and Ports", check “tcp” and enter 1443,8090.