When the source is remote powered on windows machine, agent installed on the source sends the bits directly to the ESX server, so you'll need open network from the source machine (not only from the converter server machine) to the ESX on port 902. I guess you checked this already, but I decide to mention it just in case.
Thanks,
Zaro