For anyone else who encounters this: I opened a case with TAC.The problem is a known bug, which I'm informed will not be fixed, since the VPN 3000 has an end-of-life schedule at this point.

I'm working with the original poster on this issue.The VPN 3000 concentrators do in fact apparently rewrite JAVA, although it isn't a function that can be adjusted in terms of how it happens - there doesn't appear to be any administrative settings th...