Release notes for version 30 list TCP port 993 as a fall back for port 31314. Could I suggest as a last resort DNS be used as a channel to signal wifi, DHCP is good but both TCP sessions blocked.
Say for example that both 31314 and 993 are blocked, then the IMP could DNS lookup notcp.237ffeeb1234ee.server.electricimp.com as a way of getting a diagnostics message through.