If there is a sip password mismatch, the firewall ends up blocking the remote ip address after 3 tries.
Then the next time the remote user tries to register it gets a 408.
This is because the client went from an original 403 for the wrong password to a 408 timeout once it was blocked.


Solution:

 - Reset phone SIP Password

 - Remove remote IP Address from Blocked IP