Defender for macOS - Network Filter Fails to apply

I’ve had a bunch of Macs suddenly fail to get the Network Filter config apply for Defender.
 (Configured as instructed by Microsoft below)

https://learn.microsoft.com/en-us/defender-endpoint/mac-jamfpro-policies?view=o365-worldwide#:~:text=Step%208:%20Configure%20Network%20Extension

This is resulting in a prompt "com.microsoft.wdav" Would Like to Filter Network Content that repeatedly appears in the middle of the screen and prevents users from working.

It is effecting 90 macs out of over 1000, across different versions of macOS and on both Apple Silicon and Intel. Those affected are seemingly random, although only seems to affect our Lab environments connected via ethernet, not our staff devices on WiFI.

Reseting a Mac and pulling down the same config seems to ‘fix’ the issue, so I’m guessing the issue is not with the config profile.

I’ve tried descoping and rescoping the config and uninstall/reinstall of Defender to no avail. 

I’m thinking now the issue lies with the extension com.microsoft.wdav.netext - which I can’t seem to unload remotely as SIP needs to be disabled.

Any suggestions before I have to resort to resetting all 90 Macs?