Thank you!
I have those clients having issues in a different subnet, so I will apply the following conntrack ignore rule to see if it solves the problem:
set system conntrack ignore rule 10 source address 192.168.1.0/24
I'll keep monitoring and report back.
