Yes you can use VPN client 3.0 with DES. The transformset is correct and again supported by VPN client 3.0

NAT 0 statement - I wanted to do the exact same thing. The only recourse was to add to my existing access list.

We use both PIX firewalls and IOS. The main difference between the two devices is: PIX has a much, much higher performance rating, especially throughput. Another advantage is the IDS mechanism. PIX recognize more signatures than the IDS in IOS. For a...

Never...You need to upgrade to the Universal Client 3.0.1. This however, will require you to terminate the IPSEC tunnel on a 3000 series concentrator or PIX firewall running version 6.0.

I was told by Cisco, as I have just returned from Cisco New England HQ's, that the Universal Client will be supported in a later release of the IOS due out late fall of this year.