The sonic is the firewall route in and out of the network so all traffic must pass through. The cisco side routes only VPN traffic through the concentrator. Routes have been verified on the cisco side, and can do a successfull ping to bring the tunnel up.