Clients not running actions after DSA failover

Hi, we did a test of our DSA root server by repointing the FQDN of our primary root to the IP of our DSA root. I then bounced the BES Relay service on our Tier1 Relay.

I now find that I can push a fixlet to 2 clients that are both using the same relay and 1 client runs the action and the other doesn’t and stays at “not reported”. The BES CLient log file of the not reported client shows no action command to run the action as if UDP 52311 is blocked. However, I can send a client refresh to it and it works as expected.

Support had me check some FillDBs and all that looked good, but couldn’t come up with a resolution. Has anyone seen this before or have any other ideas? thanks