Thanks for that Mark. That thread got me thinking about proxy servers. I guess in this case the VPN handles that... I must do a Google on VPN caching issues.
I have the no-cache on some of the more important pages already. I'll consider putting it in the default-master - wonder that'll affect performance? Shouldn't really I imagine as almost every page is dynamic already....