Using Squid proxy from Mobile IPsec VPN

[johnsonp]

Hi there

I have an IKE2 mobile VPN working OK and users can see anything on the internal network.  I have Squid set up using explicit proxy on the default port configured using WPAD.  Users on the internal network can browse the internet without issue, however mobile VPN users cannot browse the internet.  I have added the mobile VPN subnet to the Squid ACL, but this does not seem to help things.  I have an IPsec rule which allows all traffic, and when I look at the firewall log I can see traffic hitting the firewall from the mobile VPN subnet on port 3128 and it is passed.

Does anyone have internet access using Squid from an IKE2 VPN?

Any other advice or suggestions?

Thanks in advance
Peter