JWT installs, shows connected, but cant connect

We get the client installed, install the token, host shows up as connected. But 2 of the 4 hosts we did the same process for we cant connect to the remote hosts 22 or RDP (or anything we had set to allow).
Are there any logs we can look for that indicate where the block may be happening? The remote hosts are all similar in Linux and version.
THX

Always start by looking at the logs for the tunneler that can't connect. The logs in there are almost always sufficient to give you the clues you need.

Sometimes the remote side has issues, in those cases the remote tunneler logs are useful.

Rarely necessary in my experience, but sometimes it happens, is if the tunneler/client logs aren't highlighting the problem, the controller's logs are necessary and useful.