Core issue
This problem occurs because the Generic Routing Encapsulation (GRE) traffic over an IPSec tunnel is sent out in clear text.
This problem is documented in Cisco bug ID CSCse36327.
Resolution
As a workaround to this problem, issue the clear local-host command on the Cisco Adaptive Security Appliance (ASA) or the PIX Firewall.