The appliance is acting as expected.
VPN Remote Access using IPSec to a Security Gateway that is behind a NAT device is not supported and an RFE is required in the case of fixed and known IPs.
Solution is to use the SSL protocol.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.