Jennifer, with PPPoE the DG does not have to in the same subnet. Sent from Cisco Technical Support iPad App

configure "fixup protocol icmp".Sent from Cisco Technical Support iPad App

Essentials Lic is only used for SSL Vpn, Ipsec with ipsec client is free of charge.Sent from Cisco Technical Support iPad App

yes, it's with anyconnect essentials lic.If this lic was missing, you should see a lic failure in the Fw's log.Sent from Cisco Technical Support iPad App

yes, "the fixup protocol icmp" you need anyhow, assuming you don't have a permit icmp-reply ACL on your external interface.Sent from Cisco Technical Support iPad App