Hi all, Forgot to follow up on this for others. You were all right!!!
Needed: set security flow tcp-mss all-tcp miss 1350 to reduce TCP MISS from what we had for most setups which was 1438. https://blog.apnic.net/2014/12/15/ip-mtu-and-tcp-mss-missmatch-an-evil-for-network-performance/ Cheers.
