Hello,
To check if the non-working devices are getting the incoming TCP SYN (for ssh ot http), you can do 'monitor traffic interface irb.x no-resolve' when trying to access it and share the output.
From management perspective, do you find any difference in configuration of working switches & non-working ones?
Regards,
Rushi