After a bit of experimenting, I reinstalled Sophos, set two services to manual and it seems to be happy after a couple of reboots. They are "Sophos Web Intelligence Service" and "Sophos Web Intelligence Update", my theory being is they are messing with the network drivers somehow to scan. In this case I don't think I'll need this functionality on these tablets so I'll leave it disabled and hope for the best!
Edit: Nevermind, Sophos still killed the network. According to Microsoft "In Windows 8.1 and Windows RT 8.1, Windows Defender provides the same level of protection against malware as Microsoft Security Essentials." so I uninstalled Sophos and made sure defender was up to date.