Wow, how many day's did it take just to ask what version the poor user is on?
@MFCadmin Have you tried disabling all features other than VPN and walk your way through enabling them? I discovered a number of machines disliked sandbox and needed to be nursed with reboots and disconnecting/reconnecting to EMS to get them all scanned and happy. One of my deployment servers took months to get there, I guess as it had so much to sandbox.
Edit: Also, are you using FortiNet DNS servers? I've had poor performance in some scenarios with these.