hi all,
I am not a guru, but hope I can help you

IPSec needs an hop (network hop) between the two nodes ..
eg:
roadwarrior (subnet A) --- router --- subnet c --- efw (with ipsec server) --- subnet b
Do you have an hope between your client and your efw?

moreover, you can enable log on IPSec which could probably contain some interesting information (I hope)
Bye
Lo