I would create a NPS connection policy just for the HQ access points and add a MTU entry (try different MTU packet sizes) within the connection policy just for the HQ.  whatsapp mod watch tv series ... View more

Can you see in pcaps towards your clients that the TLS session is fully formed? Is it an EAP-TLS or an EAP-PEAP with certificate inside? ... View more