Applies to Cisco Systems VPN Client Version 4.6.
To connect through a gateway running Microsoft Internet Connection Sharing, set the option to Enable Transparent Tunneling / IPSec over TCP (on the "Transport" tab of the Connection Properties). The default TCP port 10000 seems to work fine.