SecuRemote behind Cisco firewall

[rasoftware]

We are having a lot of trouble with Securemote client running behind cisco IOS NAT/firewall.

Client is setup in office mode and connects to Checkpoint firewall at the other end.

what I notice on this cisco NAT is

udp 82.110.245.x:500 10.0.129.41:500 195.2.37.x:500 195.2.37.40:500

- IKE

udp 82.110.245.x:2746 10.0.129.41:2746 195.2.37.x:2746 195.2.37.40:2746

- because its NAT I see encapsualted UDP - 2746

It does sort of work for a while, when it fails I see many NAT connection to UDP 259 (FWZ neg) to many many addresses - I believe the other end to be a cluster. I am not expecting to see UDP/259 as this connection is over NAT.

Can anyone explain this - the customer tells me its "renegotiation" but im not so sure.