[joelmeckert]

Sounds to me as if they have a Palo Alto NGFW at the edge, filtering the traffic. UC Berkeley appears to be running a Palo Alto for at least part of their infrastructure.

https://security.berkeley.edu/services/bsecure/bsecure-remot...