Hi Brian
Is it all users at the hospital and are you talking about remote access vpn's.
If so it sounds like it could be an issue with them being behind a device that does PAT on the traffic.
You could enable Nat-traversal on your pix firewall and see if this helps.
Jon