When defining a Quick Mode Secure Connection for IPSec, PIX Firewall and Cisco IOS software can use both AH and ESP in a single Secure Connection, but the Cisco Secure VPN Client can use only one of the two per Secure Connection. I believe we can do AH and transport with the 1.1 client.