You finally get access to firewall. In the logs you find the security blocks.
A rule named "ET SCAN Potential SSH Scan OUTBOUND" which triggers on:
-- 5 outbound SSH connections
-- from the same internal IP address
-- within 120 seconds
had been set to Block by an admin trying to do right thing.