How many devices are there in total and what device platform?
Are the devices with problematic profile deployment under control (e.g. sending lock/reset passcode action from web console)?
Have you checked the CPU and memory loading/utilizations with resource monitor utility of MS-Windows?
It is typically the case when the integrity stalls halfway that communication between the Search Services and the MobiControl components is not occuring.
You did mention that you opened traffic on ports 9200 and 9300 but I suspect that the DS on the DMZ is still not communicating with the search service on port 9200.
I would also recommend looking through the Search Service logs when you attempt a Sync. If communication is fine then the Sync is stopping because it failed to parse data in the MobiControl database for specific devices (like the Samsung ELM license status issue in 14.2.2).
For more support, open a ticket with the support team and give them the Search service logs. they should be able to isolate the problem for you.
Hello Chris - Please let us know if you have any further questions on this.
Regards,
SOTI Technical Support