Thanks for replying but we actually got this sorted out this morning.  It was Intel True Key security software for anyone else who sees this and may be wondering.

Were you ever able to find a solution to this issue?  We are seeing something similar with Anyconnect also affecting a small number of devices in a large deployment.  As of now we can only temporarily fix the issue by uninstalling Anyconnect via safe...