Your WAN gateway (in your case Actiontec) is only allowing TCP 1194 to your Asus. I think you are okay.
If there was no Actiontec in the path, and the Asus was your WAN gateway, a scan would still show TCP 1194 as being open.
Ideally, if your WAN gateway had stateful firewall functionality...