I've an ASA with the latest 7.x software and some tricky problems. VPN clients can access all internal networks fine, but intermittently, a client will have an issue connecting to a SAP server using the SAP client. All other type of connections are fine, and routing through our alternate VPN site also always works. We can resolve the issue by forcing the client to get a new IP address when connecting to the ASA...Does anyone have any insights into this?