Explanation:
If a firewall, along the path connecting the Secure Client and the policy server, translates the secure clients IP address, so that the Policy server does not see the Secure Clients true IP address, Secure Client will not function properly, unless UDP encapsulation is used. See Page 12.21 of CCSE NG Official Courseware. (VPN1-FW1 Management II NG FP-1).

---