I have a XTM535 and I tried to setup a mobile Ipsec tunnel to replace the not longer supported PPTP tunnel for IOS 10 for my Ipad but even when I see the user connected I can not reach any machines in the network and when I go to the WSM there are not packages sent.
My config is
Phase 1 SHA1 and 3DES, key group 2
Phase 2 SH1 and 3DES without PFS
Force al traffic to any-external and 0.0.0.0/0