How one way or two firewall works.
In my environment, when backup fails with "unable to update chunk error" we implement one way fire wall between MA and CS.
In CS, we add MA in incoming route as Restricted.
In MA, we add CS in incoming route as Blocked.
And this solve the issue.
Could you please what happens exactly in background.