Client had a SonicWall TZ205, checked all RDP rules and everything triggered correctly.