Thanks Paddy and David much appreciated!
The network dropouts could be anything really so I'll discount those until we can work out whats going on there..
As "phase one" we asked for only browser traffic to be filtered so we have the a list of browser executables with the action of "normal filtering" and have an entry of exe:// "allow always" but I'm sure https inspection is still happening as our vpn executable is having issues talking to a secure url for connection due to what looks like https inspection. Would i need another entry to block decryption for executables in general? But the Chrome extensions seems like a more manageable way to filter browser traffic until we've ironed out the various issues we're having. I've downloaded Orca and can open the MSI settings though I can't see anything obvious when looking for NSEXCEPTIONS
We'll have to do some troubleshooting on the slow internet and intermediate internet issues as I'm experiencing it on my laptop (8th gen i5 and 16gb of ram) Both at home and in our office. But if thats sufficient then maybe something else is causing the issues.
Again, appreciate your comments.