Hey LucD,
So 902 TCP, 443 TCP, and 80 TCP were (I say were because the host is rebooting) all open for incoming. 902 UDP/TCP and 80 UDP/TCP open for outgoing. I don't happen to need 443 both ways do I?
On another note, the host that I was working with that I first noticed the issue on decided that it was officially done. I couldn't SSH in (it was enabled and firewall open) or even restart management agents or enable the shell from the console. I'm waiting for a 2-3 hour reboot because I was testing perennially-reserved flagging scripts 
and the last thing I did before it stopped playing nice was set all LUNs flags to false. Unfortunately in this environment there are quite a few LUNs presented that have permanent SCSI locks.
That being the case, it'll probably be tomorrow before I continue working on this one. In the meantime I'm having trouble finding another host that will replicate the issue again. Considering it's time to take off for the day and I'm awaiting reboot, I'll leave this one til tomorrow. Thanks for the idea though, I'll let you know the results.
~Brandit