No known issues. Cisco VPN boxes have both version 4 and 5 ACE Agents built into the code. You choose which one you want when setting up the authentication method.
PIX does not have an ACE agent built in so you would have to use RADIUS/TACACS as a proxy. There are no plans to add this feature in the future.