Hi all, just thought I'd chip in with my recent experience.
Not sure if you are configuring static or dynamic NAT, but we pretty much use static NAT all the time now.
Also if you are having problems try enabling encryption (signalling and rtp), I know it's an extra license, but it should stop any sip alg's interfering with signalling.