> ESP can work through nat if the NAT has a little bit of logic 
> on how to forward things.

Yes, but most corporate VPN's also require AH, and that will not work.

Jay