MORE INFORMATION
New IPSec Features and Management and Monitor Snap-insAfter installing this update, L2TP/IPSec clients can create IPSec connections from behind a NAT server. The new NAT-T code is designed around the IETF RFC 3193 and draft-02 of the IETF NAT-T specification.
http://support.microsoft.com/default.aspx?scid=kb;en-us;818043