This behavior most commonly occurs because port 135 is being used for RDP or some other service, and this port is normally being reserved for DCE-RPC traffic. The firewall will not recognize that and will generate the log "Blocked MS-RPC non compliant version".