This did not happen initially on EAP1, we used this site for a few weeks until last week. We get the following error and upgrading to EAP2 did not resolve. Logs say invalid traffic dropped by Rule 0.
Changing to a hot spot works fine, or on another Sophos run any 17.x works fine.