Could you please create a separate match address ACL on the ASA and PIX to apply to the crypto map (without the unnecessary addresses and permit esp any any) and let me know how it goes? And also Could you please remove the crypto maps and isakmps from the outside interfaces, remove the "permit esp any any" lines from the match address ACLs, and reapply the crypto maps and isakmps.