By default, in a Cisco VPN Interface, fragmented packets were being dropped - “fragment chain” was dis-allowed, and was dropping TFTP packets from a Polycom 320 - and ONLY this model - weird eh?
It would actually hang the phone on the boot screen - weird problem.
Anyway the fix was to allow the default - 24 fragments - Hope this helps someone in the future!
Greg