Hi Stephen,
The same issue over here. I think I've located the problem; RTP traffic on the way back from clients behind NAT have no predictable portnumbers. I think they hit the firewall and never arrive. I'm going to be looking at a solution to direct the traffic to a specific destination port. I'll keep you up to date; let me know if you find a solution!
Cheers,
Joeri