Enabled ip6v seems to have helped with the tailscale. As for my works GlobalProtect VPN its 50/50 if it will work. I found an article on Palo Altos website about changing the MTU on the headend. I put in the change request at work to add this to our portal options