Afternoon, the final answer we found for this issue was to disable IPV6 on Windows clients. Win11 seems particularly susceptible, but earlier versions had intermittent issues also. We found the issue finally, logged on today to update all with our results, and found that "axessit" had posted the same fix in parallel to our own efforts. Many thanks for that suggestion, and to all others who offered advice, although as it happened we got there finally.
Disabling IPV6 on Windows clients did indeed fix the intermittent browsing issues. The final clue was we cabled a Win11 client outside SME Server to test browsing, and it immediately connected to Google via IPV6 and worked perfectly!
This does raise a question. Both our ISPs support IPV6, as do all our clients. We would love to be running IPV6 all the way, especially with Starlink as we would then have remote access back to that site and get away from GNAT. Our Starlink does support IPV6.
I appreciate it all takes time and expertise we don't have, but do wonder when SME might support IPV6.
Currently am rather wondering if we should switch to Ubuntu Server possibly which I believe does support IPV6, but its a major job to change and rather daunting....