Here is the configuration options I use. Everything else should not be selected :
Profile
- General
-- Advanced
---- Enable advanced settings
---- Perfect Forward secrecy (PFS): server
- Authenticate
-- User data
---- Username : put your username
---- Password : put your password
---- Save user password
-- PSK
---- Save PSK
---- Pre shared key: Company pre-shared key
-- Network
--- General
---- Use connection status check
------ Interval : 1
------ Success count : 4
---- Use specified address to ping : put your workstation IP
--- Routes
---- Replace default route
--- NAT
---- Use UDP (NAT-T)
I sometime get timeout on the VPN server but If I retry it works.