You used tools like Security compliance manager ot Security Configuration Wizard to harden your Windows Server.

With the "Remote Desktop Connection Broker" role installed this may lead to an Event 5157

"The Windows Filtering Platform has blocked a connection"

 

This script adds a WFP rule to allow RDS Connection Broker to connect to SQL via UDP port 1434