Man in the Middle

Yes, if the 1020 is a concern, the Firewall Event log should show you why it was blocked. It may provide a clue as to why the other errors/warnings are appearing.