Thanks for your response - I ended up running through our local SMTP relay. Something goofy is going on with our public IP & Microsoft not wanting to listen, it seems
SMTP relay works great, we will work on getting encrypted traffic direct to Microsoft figured out soon enough.
Thanks again!