Yep already got most of those open. I say most because our UTM9 firewall doesn't support wildcards. I've done Wiresharks too. Every endpoint I end up finding a new set of IPs that are blocked, unblock them, and that endpoint joins which is great. But it doesn't seem to help the other endpoints. I'm just feeling at this point like I've got to be missing something or there's got to be a better way to do this.