The following article fixed the issue. - EXCELENT
Unfortunately a Sophos engineer helping us was unaware that DOS UDP flood protection will ruin a perfectly good VPN.
Do NOT click the Apply Flag box for UDP flood Source if you have VPN clients.
This thread was automatically locked due to age.