Test from the client network
Resolve the configured hostname and test TCP port 587 from the same network or node as the device. Testing from a laptop elsewhere does not prove the production path.
Interpret the stage
No TCP connection indicates a network path issue. A connection without a greeting suggests an intermediary or service issue. A greeting followed by failure moves investigation to STARTTLS or authentication.