Hey Matt, just a final update… the clue that I couldn’t access the VPN web client, ping or tracert led me to check the public IP when we were on the hot spot, and it was the same as when on the LAN so it meant the user’s phone was using the local network. Disabled the Wi-Fi on the phone and kaboom!! Ping, tracert and web VPN all working!!! Reinstalled latest VPN Forticlient and happy days 