Could it be an MTU issue? Can you play with the ping tool using the do-not-fragment flag to discover the largest MTU that cat reach 8.8.8.8 from the work-marchine after IPsec tunnel is up?
Here is a discussion of the issue with NordVPN in more detail, specifically replies by @sindy toward the end.