Hello.
I had a problem with tracert from windows via ASA.
I read this article - http://astorinonetworks.com/2012/02/13/asa-icmp-error-inspection/
And after i'll enable inspect icmp error, i have a problem with my NAT to VPN lan...
Some servers i can't connect using rdp port or EXSi ports, but some servers work fine with rdp...
If i disable - no inspect icmp error, all work fine...
P.S. Если не очень понятно могу написать по русски.
