I was able to hear back from the network team about security.
It seems like there is no security in place to block anything...
The issue is that the traffic is coming back from the wrong interface on the server.
The question is why the RFP ACKs keep coming back from the service console interface instead of the VMotion interface? That seems to be the problem.
Ideas, thoughts are welcome 