I have nothing further, I work in 2nd level and those settings I listed in conjunction have 100% success rate in my experience, which means there is something else overlooked or you have a Firewall doing something *wonky*.
Your next step is to do a wireshark trace of a scan between the device and server and read it to see what step is failing.