Reply from IT -
On the new firewall, people that may have malware on their machines trying to run scripts on the site that they may not even know about will trigger a capcha that will check if they are human, then let them in and block whatever script it is.. Also, the rare person that runs a browser with no Javascript on purpose (also bad bots flags) can trigger it