Many network security devices block all ICMP messages for perceived security benefits, including the errors that are necessary for the proper operation of PMTUD.
Network security measures can restrict or block ICMP traffic, which is necessary for proper PMTUD functionality.