This is my personal opinion, but I gave up on trying to GPO or package the Cisco VPN client. I simply added it to my SYSPREP images. Every time I tried, it would end up Blue-Screening someone or make them loose their TCP/IP stacks, causing major headaches, like having to reinstall the stack...