BYOC Edge v2023.12.05 Audio Drop on VPN

Error 401 on BYOC Edge v2023.12.05 when agents push audio over site-to-site VPN. MOS drops to 2.1. Traceroute shows packet loss at hop 14, right before Genesys edge IP. We’ve tried forcing TCP fallback in browser console, it’s holding for half the calls. Bandwidth shaping on firewall locked to 40k for DSCP EF. Mic stays hot during reconnect. Does edge expect STUN binding refresh every 15 seconds or 30? Logs just cut off after ICE candidate gathering.