I assume your firewall is configured to not allow UDP at all. The connection server is always available, it’s just as if you open a webpage in your browser. The only difference is that it uses UDP. It certainly has nothing to do with low bandwidth, because for logging in, only a few bytes are exchanged.
With the latest versions, port forwarding should no longer be necessary except in very rare cases.
Do you happen to have some extra firewall installed?