a few combuters in my combany has regularly firewall block TCP high ports in; NMAP XMAS scan and also NULL scan. These come always same ip-address. What you will recommetred to do whit this?
I found some similar posts in the past regarding your query which is this and this.
Please have a look and update us if it was helpful. If not, I might recommend to get in touch with our support for understanding about it in detail.