We can't help much without a raw packet. Can you get a capture from the firewall?

Or failing that, setup some other way to capture packets (does iOS do reverse tethering? or you can setup a different wifi access point and capture packets between that and the firewall, etc)