For 10 years, this has worked. There has been no updates, firmware or configuration.
3 location site to site VPN. At the main site is an Exchange server that requires port 443 for Activesync.
It's been working.
Suddenly yesterday at lunchtime, client...