The only solution I have found is to delete ALL the NIC connections in PCC - Networking, and then create a new one, checking that the correct encryption is used for the connection.
You might have to do it a couple of times before it sticks, when it is troublesome.