Full disclosure, I'm not a network engineer, just a regular developer who wants a better VPN experience. I think this issue is because of HTTP/2, and I don't want to give up on an elegant solution just yet.
Basically:
access VPN restricted site get a 403 (via cURL, I can see the connection is left open) join VPN, hard refresh page Page loads for Firefox, not for C...