VPN Phone Stuck Discovering

[Tjohnston224]

I believe I have a routing issue somewhere thats preventing me from connecting a VPN phone to a customer's IP Office, but I'm having trouble figuring it out. IPO is R7, phone is a 9620, firewall is a Cisco ASA. I complete IKE Phase 1 and 2, so I know my credentials are okay. It gets an IP address from the pool(192.168.200.x), but then sits on discovering. I can see the session in the ASA monitor. I cannot ping the phone's IP from the IP Office. If I connect with the same details from a Cisco client on my PC, I can see and connect to the IP Office. Any help would be greatly appreciated. I can provide any needed info. Relevant details are:

IPO LAN1: 38.288.87.3
IP Pool: 192.168.200.X
ASA internal IP: 38.228.87.151

Phone Settings
Gateway Address: x.x.x.x(public IP of Cisco ASA)
External IP: 10.10.10.41(my office)
External Router 10.10.10.1
External Subnet: 255.255.255.0
External DNS: 10.10.10.8
Encapsulation 4500-4500
Auth: PSK w/ XAUTH
VPN User Type: Any
IKE Config mode: enabled(tried disabled as well)

The IP Office has the following IP routes built:

192.168.200.0(IP)--255.255.255.0(mask)--228.228.87.151(gw)--LAN1
0.0.0.0--255.255.255.0--38.228.87.151--LAN1
192.168.99.0--255.255.255.0--0.0.0.0--Remote Manager

 

[Tjohnston224]

I should also mention that if I set the HTTP server, if looks for the upgrade files but times out with HTTP 1 -905.