May have jumped the gun posting this one as release 6.3.1172.3 may have resolved the issue :
New features in 6.3.1172.3:
Issue: Users may not be detected on a PC with multiple IP addresses. Affects: 6.3.1172.0-6.3.1172.2 Change: Allowed the client workstation to be queried directly when the log-parsing approach does not work.
Bug-fixes in 6.3.1172.3:
Issue: The Active Directory agent is unable to query usernames from the Domain Controller. Affects: 6.3.1172.0-6.3.1172.2 Change: Enhanced the Global Catalog (GC) discovery mechanism to bind to the correct GC.
Issue: Sometimes the Domain Controller Agent cannot find the username/group by IP address. Affects: 6.3.1172.0-6.3.1172.2 Change: Allowed the client workstation to be queried directly when the log-parsing approach does not work.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...