You need to provide network diagram how it looks like.
Looks like some where in the path you have issue.
how about local users sitting in the Lan accessing the Websites using Proxy ?
Where is Wireshark capture point ?
what is your Proxy Logs show ( what proxy is this ?)