Security can fail before a firewall gets involved. A damaged patch lead can...

https://wiki-nest.win/index.php/Why_Does_My_VPN_Handshake_Fail_Randomly_at_Work%3F

Security can fail before a firewall gets involved. A damaged patch lead can stop VPN handshakes; default switch credentials can help intruders move across an office