Can firewall rules interfere with `sqlcmd`'s ability to establish an SSL connection?

Yes, firewalls can block the necessary ports for SSL/TLS communication (typically port 1433, but it can be configured differently). Ensure that your firewall allows outbound connections from the client machine to the SQL Server instance on the appropriate port. Also, verify that there are no intermediate firewalls blocking the connection.