The top 2 do not apply to my environment.
the other link is stuff I already know however I think I may have found the answer to my own complex issue it seems all the devices experiencing this issue all reside on the same BES (being we have 5) so I need to isolate the service that the devices aren't able to connect to and "kick" them (restart)
Now on to find the needle in the hay stack