Hi,
I was troubleshooting an X-Windows connection from inside (PC running Xceed client) to outside (UNIX server).
The solution was:
1) Allow inbound TCP 6000 from the server
2) established tcp 0 6000 permitto tcp 6000-6063 permitfrom tcp 1024-65535
(See established command in the command reference guide).
Have you tried to allow any IP between your client and server using an ACL with logging and see to Syslog to recognize which ports are involved?
Regards,
Milan