Site to site VPN / Unifi

Is Comcast Commercial doing anything that would block the Site to Site VPN IPsecIVT (auto) from working both ways.

Meaning from the Commercial location, I can tunnel into the Resi location (both).

But can't log into the business WAN/Network via either Resi locations.

I have 2 Resi locations that need to tunnel both ways into the comm location.

I have same type/brand network devices at each location.