You don't specify which PIX software version your running, so I am assuming it is version 6.3+ if this is the case then what your missing is known as 'split-tunneling' - by adding the following, you'll be able to connect to your PIX using the vpn client whilst also accessing the internet.
From a security point of view, I wouldn't allow this! I would rather allow access via a proxy within your secure LAN i.e. when your connected via the client to your LAN set your internet browser to point to a internal proxy ip address and hence all internet browseing traffic will traverse via the encrypted tunnel.
access-list 101 permit ip 10.0.0.0 255.255.255.0 172.16.200.0 255.255.255.224
nat (inside) 0 access-list 101
vpngroup split-tunnel 101
If your using PIX/ASA version 7.0+ then take a look here:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805734ae.shtml
Also, if you have not already done so, I would enable nat-traversal this will help if your vpn client connection encounters a NAT device along the path as NAT and IPSec don't go hand-in-hand!!
i.e.
isakmp nat-traversal
Hope this helps and please rate posts!
Jay
