How do you get the cisco secure vpn client to work behind a PIX 501

[Szipp]

I currently have a consultant using a PIX 501 at a remote office. I need this user to connect through the PIX 501 to my VPN concentrator via the cisco secure vpn client (version 4.0.2) The PIX IOS is version 6.3

Does anyone know how to make this work, it is driving me crazy.

 

[themut]

If the VPN concentrator supports NAT-T, the easiest way would be to open UDP ports 500 and 4500 and enable NAT-T on the VPN 3K.

If not, you may configure a static one-to-one transalation for the VPN client user and open UDP port 500 and ip protocol 50. Hope this helps!