I’ve deployed a web application using a client’s subdomain. While it’s accessible from public networks, their internal network’s firewall is blocking access. They’ve asked for SPF and TXT records, presumably to configure their firewall for access
It is difficult to give any advice without knowing what exact records to they need (no need to publish the keys if any).
Most probably you will need to configure these records by yourself in the client’s domain zone.