That's not wrong, SIP clients can use any ports they wish using
rport. Otherwise you would only be allowed to use one SIP client per IP address.
Does that network have some sort of SIP ALG enabled? If so disable it.
Also arbitrary port blocking rules for UDP? If so, whitelist the PBX address.