EAP1 and EAP2 SSL Handshake issue with site

This did not happen initially on EAP1, we used this site for a few weeks until last week.  We get the following error and upgrading to EAP2 did not resolve.  Logs say invalid traffic dropped by Rule 0.

 

Changing to a hot spot works fine, or on another Sophos run any 17.x works fine.