Yes, you can config ip nat translation for your internal user's internet access.
In the same time, config remote-access VPN client 3.x on the router as well.
VPN client 3.x working fine on all windows platforms, linux, unix, MacOS.
Here is the sample config from CCO for that:
http://www.cisco.com/warp/customer/471/ios-unity.html