Hi Patrick,
Try the command on your PIX/ASA
crypto isakmp nat-traversal 20.
And make sure you have NAT 0 statement on ASA to bypass NAT for VPN traffic to client.
Regards
M
Mohit Paul
CCIE-Security 35496
P.S Please do rate this post if you find it helpful to make it easier for others seeking answers to similar queries