More likely it’s just a new bug in the ISAKMP ALG that wasn’t there before, introduced by the fix to get the Nortel Contivity VPN to work. Wouldn’t it be nice if you didn’t need an ALG at all to interoperate? What a wonderful world that would be.

Well Sonicwall didn't work before the fix, nor after, so I am willing to try a few things out. I have the ear of an apple engineer to report results to.